Privacy policy
Last updated October 15, 2026
Blockout is operated by Neonflow LLC ("we", "us"). This policy explains what we collect, why, and how you can control it.
What we collect
- Account details: your name, email address, and password hash, plus billing details handled by Stripe. We never see your full card number.
- Google account data: when you connect a Google account we store an access token and refresh token so we can read and write your calendars on your behalf. We store the list of your calendars and, for calendars you turn on, a copy of event times, titles, status, and visibility for roughly the past week and the next 90 days.
- Things you create: sync rules, blockers, scheduling links, and bookings made through your links, including the booker's name, email, and answers to your questions.
- Usage data: standard server logs and error reports needed to keep the service running.
How we use Google user data
Blockout's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- We read your calendars only to show availability on your booking pages and to copy busy time between calendars according to rules you set up.
- We write to your calendars only to create, update, or delete the synced copies, blockers, and bookings you asked for.
- We do not use Google user data for advertising, we do not sell it, and we do not share it with third parties except service providers who host and operate Blockout on our behalf.
- Humans do not read your calendar data except with your permission for support, when required by law, or for security and abuse investigations.
- Google user data is never used to train machine learning or AI models.
Sharing
We share data only with the providers needed to run the service: our hosting and database provider, Stripe for payments, our email delivery provider for transactional email, and our error monitoring provider. Booking details are shared with the person you book with, in both directions.
Retention and deletion
Turning a calendar off deletes its cached events immediately. Disconnecting a Google account deletes its tokens, calendars, and cached events. Deleting your Blockout account deletes everything we hold about you within 30 days, apart from invoices we are legally required to keep. You can also revoke Blockout's access at any time from your Google account permissions.
Security
Google tokens are encrypted at rest. All traffic is served over HTTPS. Access to production systems is limited to the people who operate Blockout.
Cookies
We use a session cookie to keep you signed in and a preference cookie for your theme. We do not use advertising or cross-site tracking cookies.
Your rights
You can export or delete your data by emailing support@blockout.day. If you are in the EU, UK, or California you have additional rights to access, correct, and erase your data, which we honor on request.
Changes
If we change this policy in a meaningful way we will ask you to review it the next time you sign in.
Contact
Neonflow LLC
4601 E. Douglas Ave.
Wichita Kansas 67218
support@blockout.day