Privacy Policy

Last updated: September 10, 2026
Effective for: Room Cherry (https://www.roomcherry.com)

Room Cherry (“Room Cherry,” “we,” “us,” or “our”) is a meeting room display product. This Privacy Policy explains what information we collect, how we use it, how we store and share it, and the choices you have. It is written for people who connect a Google account so Room Cherry can show live room availability on display devices (for example, an iPad outside a meeting room).

By using Room Cherry, you agree to this Privacy Policy. If you do not agree, please do not use the service.

1. Who we are

Questions about privacy or this policy: support@roomcherry.com.

2. What Room Cherry does

Room Cherry helps organizations show whether a meeting room is free or busy on a dedicated display. Users sign in with Google, connect Google Calendar resource calendars (room calendars), and receive secret display links and QR codes. Those links power room signs that show live availability and related meeting information.

Pricing is $10 per resource per month after a 7-day trial. Sign-in and Google Calendar access use Google OAuth through the Lovable platform’s app-user connector gateway.

3. Information we collect

3.1 Google account identity (sign-in)

When you sign in with Google, we receive standard Google profile and email information needed to identify your account and operate the product, such as:

• Your Google account email address
• Basic profile information Google provides for sign-in (for example, name and profile picture, if available)
• OAuth tokens that allow Room Cherry (via the Lovable gateway) to access only the Google Calendar data you authorize

We do not receive or store your Google password.

3.2 Google Calendar data (for connected resources)

With your permission, Room Cherry accesses Google Calendar data for the resource calendars you choose to connect. Depending on what you authorize, this may include:

• Resource / room calendar metadata (names, identifiers, and related calendar settings needed to list and sync rooms)
• Calendar events on those resource calendars (including event titles, start/end times, status, and other event fields needed to show who is using the room or who is next)

We request only the Calendar scopes listed in Section 4. We use this data only to operate room displays and related product features you enable.

3.3 Product and account data we create

In addition to Google-sourced data, we may store:

• Which Google Calendar resources you connected
• Secret display links and QR codes associated with those resources
• Subscription / billing status (trial vs. paid, number of resources)
• Basic product usage needed to run the service (for example, when a display last refreshed)

3.4 Technical data

Like most web apps, our hosting and infrastructure may process standard technical logs (IP address, browser/device type, timestamps, and similar request metadata) for security, reliability, and abuse prevention.

4. Google OAuth scopes we use

Room Cherry uses Google Sign-In for identity (standard profile/email) and the following Google Calendar scopes:

We do not request write access to your calendars or events. We do not use Google Calendar data to sell advertising or to build unrelated profiles.

5. Why we use this data (purposes)

We use the information described above to:

1. Authenticate you and associate connected rooms with your Room Cherry account.
2. Sync Google Calendar resource calendars you choose so room displays stay accurate.
3. Generate and serve secret display links and QR codes for iPad (or similar) room signs.
4. Show live room availability on those displays — free/busy state, current meeting information, and upcoming meetings as needed for a useful room sign.
5. Operate billing and trials ($10/resource/month after a 7-day trial).
6. Maintain security, reliability, and support (including troubleshooting when you contact us).
7. Comply with law when we are legally required to do so.

We use Google user data in line with the Google API Services User Data Policy, including the Limited Use requirements for Google Calendar data. In plain terms:

• We use Calendar data only to provide and improve user-facing Room Cherry features that are clear from the product experience.
• We do not sell Google user data.
• We do not use Google user data for advertising.
• We do not allow humans to read Google user data unless you give us permission for support, it is necessary for security/compliance, or we are legally required — and then only with appropriate limits.
• Transfers to our service providers (see Section 7) are limited to what is needed to run Room Cherry.

6. How we access Google data (OAuth and architecture)

• You grant access through Google OAuth.
• OAuth and Google API calls for Calendar are handled via the Lovable app-user connector gateway. Room Cherry is built on Lovable.
• The Room Cherry application does not store Google OAuth client secrets for this flow; credential handling for the connector gateway is managed through Lovable’s infrastructure as configured for the app.
• Access tokens are used to fetch Calendar resource and event data needed for displays; you can revoke access at any time (see Section 9).

7. How we store, retain, and protect data

7.1 Storage

Account, connection, display-link, and synced Calendar-derived data needed for room signs are stored in systems operated for Room Cherry (including Lovable hosting/infrastructure and related cloud services). Google remains the system of record for your Calendar; Room Cherry retains copies or derived state only as needed to run displays and the product.

7.2 Retention

We retain:

• Account and connection data while your account is active and for a reasonable period afterward if needed for billing disputes, security, or legal obligations.
• Calendar-synced data used for displays while the resource remains connected and the display feature is in use; when you disconnect a resource or revoke Google access, we stop new sync and remove or de-identify stored Calendar-derived display data within a reasonable time, except where we must keep limited records (for example, billing history).
• Technical logs for a limited period for security and operations.

If you want deletion of your Room Cherry account data, email support@roomcherry.com and we will process the request as described in Section 9.

7.3 Security

We use industry-standard practices appropriate to a small SaaS product (encrypted transport via HTTPS, access controls on production systems, and reliance on platform security provided by Lovable/Google). No method of transmission or storage is 100% secure; please use secret display links carefully and revoke access if a link may have been exposed.

8. Sharing of information

We do not sell your personal information or Google user data.

We share information only in these limited ways:

Display links and QR codes: Anyone who has the secret display URL can see the room availability information that link is designed to show (including event titles and related meeting context for that room). Treat display links like passwords; regenerate or disconnect if a link is shared too widely.

We do not share Google Calendar data with third parties for their own advertising or unrelated products.

9. Your choices and controls

You can:

1. Disconnect a Google Calendar resource in Room Cherry so it is no longer synced for displays.
2. Revoke Room Cherry’s Google access at any time in your Google Account permissions: https://myaccount.google.com/permissions
3. Stop using a display link by disconnecting the resource or contacting us to invalidate links.
4. Request access, correction, or deletion of Room Cherry account data by emailing support@roomcherry.com.
5. Cancel your trial or paid subscription according to the product’s billing controls / by contacting us.

After you revoke Google access, Room Cherry can no longer call Google APIs on your behalf. We will remove or stop using stored Calendar-derived data as described in Section 7.2.

10. Children

Room Cherry is intended for workplace and organizational use by adults. We do not knowingly collect personal information from children under 13 (or under the age required by local law). If you believe a child has provided us personal information, contact support@roomcherry.com and we will take appropriate steps to delete it.

11. International users

Room Cherry may be operated from Canada and use infrastructure in other countries (including those used by Lovable and Google). If you use the service from another country, your information may be processed in those locations. By using Room Cherry, you understand that your information may be transferred to and processed where our providers operate, subject to applicable law.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version at https://www.roomcherry.com/privacy and change the “Last updated” date above. If changes are material, we will provide additional notice where appropriate (for example, in-product or by email). Continued use after an update means you accept the revised policy.

13. Contact

For privacy questions, deletion requests, or Google user data inquiries related to Room Cherry:

Room Cherry
Email: support@roomcherry.com
Website: https://www.roomcherry.com
Privacy page (intended publish URL): https://www.roomcherry.com/privacy

14. Google API disclosure

Room Cherry’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.