YazQetero

01Overview

YazQetero is a scheduling service operated by Stellar PLC (“we”, “us”). It lets an organizer publish availability, share a booking link, and let other people (“invitees”) book time. This policy explains what we collect through the hosted service at this site, why, and the choices you have.

YazQetero is also available as software that others can run on their own infrastructure. When someone else hosts YazQetero, that operator — not Stellar PLC — controls the data on their instance, and this policy does not apply to it. See Self-hosted deployments.

02Information we collect

We collect only what the service needs to work.

From organizers (account holders)

Your name, email address, and password. Passwords are stored only as a salted hash, never in readable form.
Your time zone, and an optional profile image and workspace branding (logo, accent color) that you upload.
Your availability, event types, and the custom questions you add to a booking form.
If you connect Google Calendar, an access and refresh token for your primary Google calendar. We use these only to check free/busy times, to check for conflicts when a booking is rescheduled, and to create, update and delete events for your bookings.

From invitees (people who book)

The name, email address, and time zone you enter to book, and your answers to the organizer’s questions and any notes you add.
The details of the booking itself — which event, and the date and time.

Payment information

Paid bookings and subscriptions are handled by Chapa through its own hosted checkout. Card and payment-instrument details are entered on Chapa’s pages and are never received or stored by YazQetero. We store only references that let us match a payment to a booking or invoice, its status, and any refund record.

Collected automatically

To keep the service running and secure we process technical data such as session cookies, IP address, and request metadata used for rate limiting and abuse prevention. We do not use advertising or cross-site tracking cookies.

03How we use information

To provide the service: authenticate you, show availability, record bookings, and sync calendars.
To send transactional messages — booking confirmations, reschedules, cancellations, verification and recovery links, and account or billing notices. These are not marketing.
To take payment and issue invoices and refunds through Chapa.
To keep the service secure and reliable — preventing abuse, rate limiting, and diagnosing problems.
To meet legal and accounting obligations.

We do not sell personal information, and we do not share it for advertising. We share it only with the providers needed to deliver the service, and only for that purpose:

Google — when you connect a calendar, to read free/busy times and the times of events in a rescheduled booking’s range, and to create, update and delete your booking events. Those events include the invitee’s name and email address, and the location and any notes for the booking.
Chapa — to process payments and refunds for paid bookings and subscriptions.
Email delivery — the email provider configured for the service, to send the transactional messages above.
Hosting and infrastructure — the providers that run our servers and database.

When an invitee books with an organizer, the booking details are shared with that organizer, who is responsible for how they use them. We may also disclose information if required by law or to protect the rights, safety, or security of users or the service.

05Google user data

If you connect Google Calendar, YazQetero receives your Google account identifier and email address when you connect, and keeps only the identifier, to recognise the same account if you reconnect. It also accesses the free/busy times of your calendar, and the events it creates for your bookings. When a booking is rescheduled, it also reads the events on your primary calendar in the affected time range and uses only their start time, end time and status to check for conflicts; these events are not stored. We use this only to show accurate availability and to create, update and delete the calendar events for bookings made through YazQetero. We do not share Google user data with third parties except the hosting providers that run the service, and we never sell it or use it for advertising or to train AI/ML models. Access tokens are encrypted at rest with AES-256-GCM. When you disconnect Google Calendar, we stop using the tokens immediately, revoke them with Google, and then delete them. If Google cannot be reached, we keep the encrypted tokens, unused, until a retry succeeds. If your account or workspace is deleted, the stored tokens are deleted with it. You can also remove YazQetero’s access at any time from your Google Account’s security settings. YazQetero’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

06Data retention

We keep personal information for as long as your account or workspace is active and as needed to provide the service. Bookings and related records are retained while the account exists and for a reasonable period afterward to meet legal, accounting, and dispute-resolution needs, then deleted or anonymized. You can ask us to delete data sooner, subject to records we must keep by law.

07How we protect information

We use industry-standard measures to protect your data, including encryption of passwords, encrypted connections, scoped database credentials, and access controls. The production architecture uses row-level security and separated credentials. No system is perfectly secure, so we cannot guarantee absolute security, but we work to protect your information and to respond promptly to any incident.

08Your choices and rights

You can:

Access and correct your account details from your workspace settings.
Disconnect Google Calendar at any time, which revokes our access to it.
Request a copy of your personal information, or ask us to correct or delete it.

To make a request, email privacy@stellarplc.com. We may need to verify your identity first. If you are an invitee and want a booking corrected or removed, you can contact the organizer directly or reach us and we will help route the request.

09Where your information is processed

Stellar PLC is based in Ethiopia, and information may be processed there and by the providers listed above, which may operate in other countries. Where information is transferred across borders, we take steps to see that it remains protected consistent with this policy.

10Children

YazQetero is intended for people who can enter a binding agreement and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

11Self-hosted deployments

Anyone can run YazQetero on their own infrastructure. On a self-hosted instance, the operator who runs it is the data controller and is responsible for its own privacy practices and for any notice to its users. Stellar PLC does not receive or have access to the data on instances it does not operate, and this policy covers only the hosted service Stellar PLC provides.

12Changes to this policy

We may update this policy as the service changes. When we make a material change we will update the date above and, where appropriate, notify you. Continuing to use the service after a change means you accept the updated policy.

13Contact us

Questions about this policy or your information? Email privacy@stellarplc.com (Stellar PLC, Ethiopia).