Privacy & Google account access

Friday and appointment calendar privacy

Last updated: 11 September 2026

This notice explains how Oliver Edgington uses information through Friday, his personal work assistant, and the appointment calendar on oliveredgington.com. Both use the Google application named Friday.

Oliver Edgington is responsible for these services and the personal information he processes through them. For privacy questions, access or deletion requests, email ollie.edgington@gmail.com. This notice covers the Google integrations and appointment service; it is not a privacy notice for the separate businesses featured in the portfolio.

Information accessed and why

Friday connects Google accounts chosen by its operator. Depending on the permissions granted and the task requested, it can use account identity details, email messages and metadata, and calendar events. This supports finding and summarising correspondence, preparing or sending messages, managing calendar entries and carrying out requested administrative work. Account permissions are shown during Google authorisation. A permission describes what an integration can do; it does not mean that every item in an account is retrieved for every task.

The website calendar uses Google Calendar event access to read Oliver’s connected Personal, Telegraph and KISSD calendars, calculate availability and check for conflicts. It creates accepted bookings in his Personal calendar. Visitors do not connect their own Google accounts to view availability or book.

A booking collects your name, email address, business or client name, meeting purpose, location, selected times, timezone and video preference. These details are used to arrange and administer your appointment. Google Calendar receives the appointment details and sends the attendee invitation; Google Meet can provide a meeting link if selected. Please avoid including sensitive personal information in booking fields.

What appears on the availability page

The availability page displays occupied times and selected business and location labels. Full original event titles, descriptions and attendee lists are not returned by the availability API. Personal events normally appear as “Personal”. Deliberately formatted business and location labels can appear publicly. Telegraph events appear as “Telegraph” in “London”; KISSD events may include their location. Detected meeting URLs are displayed as “Online”.

The business name and location you enter for a new booking can appear as labels in the public availability schedule. Your attendee email and meeting-purpose text are not included in that public schedule.

AI processing and other recipients

Friday can pass relevant task content, including retrieved email or calendar information, to the AI service selected for that task. Supported services include OpenAI and Google Vertex AI. This enables the assistant to interpret requests, summarise information and produce responses or proposed actions. Conversation history and tool results may contain this information. The website’s availability calculation and booking submission do not require AI processing.

Information is shared with Google to operate the connected services, with the selected AI provider when a Friday task uses it, and with the recipients of messages or invitations that the operator sends. Hosting, security and backup services may process information needed to operate and protect the systems. Service providers may process information outside the UK under their applicable data-processing terms and safeguards. Contact Oliver for information about the providers and arrangements relevant to a particular request.

Google-connected information is used to provide the requested assistant and scheduling functions, not for sale, advertising profiles or training a general-purpose AI model. Friday’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Storage, security and retention

Google authorisation credentials are stored on the server, not delivered to website visitors. Account access is granted through Google OAuth rather than by collecting your Google password. Access controls and restricted credential-file permissions protect the integrations. Web and service infrastructure may retain technical records needed for operation, troubleshooting and security.

Friday retains connected-account credentials while the connection is in use. Disconnecting a Google account in Friday removes that connection’s active credential record; Google access can also be revoked separately. Stored conversations, task output, logs and backups are separate from the connection and are not automatically erased by revocation. Their retention depends on their continuing operational purpose, resolving issues, applicable record-keeping needs and deletion requests; they do not currently share a single automatic expiry period.

The booking service keeps request hashes, booking identifiers, times and processing status to prevent duplicate appointments. These records expire for operational use after 56 days and are removed when that store is next updated. Appointments and invitations remain in the relevant Google calendars until removed. Deleting a local record does not delete a recipient’s copy of an email or invitation. Backup copies may remain until replaced under the applicable backup cycle.

Your choices and rights

You can choose not to connect a Google account and can revoke Friday’s access in Google Account connections. Revocation stops future access under that authorisation; it does not undo messages sent, appointments created or previous processing. You can contact Oliver instead of using the booking form.

Where UK data-protection law applies, information is processed to take steps you request before entering a contract or to provide an agreed service, and for legitimate interests in organising work, handling correspondence and keeping systems secure. Consent is used where required, including optional permissions or analytics. Granting a Google permission is a technical authorisation and does not replace the applicable legal basis for each use.

You may request access, correction or deletion of your personal information, object to processing, or request restriction or portability where the relevant right applies. Where processing relies on consent, you can withdraw it. Email ollie.edgington@gmail.com with enough information to identify the account, appointment or record concerned; never send passwords or access tokens. Identity may need to be verified before a request is completed. You can also complain to the Information Commissioner’s Office.

Cookies and changes to this notice

This policy page and the appointment page do not load Google Analytics. The portfolio’s other pages offer an analytics preference control. Operational browser storage or cookies may be used where needed for application preferences or an authenticated Friday session.

This page will be updated when the described processing changes. The date above identifies the current version.