Skip to content
Overlappy

Privacy policy

This policy explains what Overlappy (overlappy.com) collects and why.

Last updated October 24, 2026.

Overlappy is run by Galene Labs. You can reach us at hello@galenelabs.com.

What Overlappy stores

If you sign in, we store your name and email from Google and the events you create. For each event we store the names you enter, any email addresses you add, and the times people mark. If you add a confirmed time to your calendar, we use Google Calendar access only to create, move or delete that one event. Events are deleted 30 days after the meeting, or 60 days after the last possible date if no time was picked. Signing in sets a cookie that keeps you signed in. Guests don't sign in.

Google user data

What we receive and how we use it

When you sign in with Google, we receive your name, email address and profile picture. We use them only to create your account, show your guests who an event is from, and email you about your events. If you choose to add a confirmed time to your Google Calendar, we ask for permission to manage calendar events (the calendar.events scope). We use it only to create, move or delete the events Overlappy books for you, and to invite the guests you added email addresses for. We never read, list or change your other events.

Overlappy's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Who we share it with

We don't sell Google user data, use it for advertising, or use it to train AI or machine learning models. Nobody reads it unless you ask us to (for example, for help with your account), it's needed to look into abuse or security problems, or the law requires it. We share it only:

  • With the people you invite. Guests see your name on their event page and in the emails Overlappy sends them. If you add the event to your Google Calendar, Google sends the invites from your calendar to the guests you added email addresses for.
  • With the service providers that run Overlappy for us, only so they can provide it: Google Cloud (hosting), Neon (database) and Resend (sending email). They process data only on our instructions, in the UK, the EU and the US.
  • If the law requires it, or to protect people from harm or investigate abuse of Overlappy.
  • If Galene Labs is ever merged or sold. The data would move with it, and we would tell you first so you could delete your account.

How we protect it

  • Everything travels over HTTPS, so it's encrypted between your browser and Overlappy, and between Overlappy and Google.
  • Our hosting and database providers encrypt all stored data.
  • The tokens that let Overlappy use your Google Calendar are also encrypted in our database, with a key kept separately in Google Secret Manager. Only our server uses them, and only to create, move or delete the events you booked.
  • Only the Overlappy service itself and Galene Labs' administrator can access production data.
  • We never see or store your Google password.

How long we keep it, and deleting it

  • Your name, email address and profile picture: while you have an account.
  • Google Calendar access tokens: while you have an account, so Overlappy can move or delete the events it booked. Removing access in your Google Account stops them working straight away.
  • Events, including the ID of any Google Calendar event we created: deleted 30 days after the meeting, or 60 days after the last possible date if no time was picked. Events already in your Google Calendar stay there; they belong to you.
  • Sign-in sessions, which include the IP address and browser they came from: deleted when they expire, at most 60 days after you last signed in.
  • Server logs, which can include IP addresses and the pages visited: 30 days.
  • Deleted data can stay in our database provider's backups for up to 7 days before it's gone for good.

To delete your account and everything linked to it, email hello@galenelabs.com from the address you sign in with. We delete your account, your events and any stored Google access within 30 days and tell you when it's done.

You can also remove Overlappy's access at any time in your Google Account settings. It stops working straight away.

Analytics

We use Google Analytics to see how many people visit, which pages they use and roughly where they're from, so we know what to improve. It uses cookies, and Google processes the data for us. In the UK, EEA and Switzerland it only sets cookies if you agree; otherwise it sends basic measurements without them. We don't send names, email addresses or private links to Google Analytics.

You can opt out with Google's browser add-on. See how Google uses information from sites that use its services.

Advertising

Overlappy is free because it shows ads served by Google AdSense. Google and its partners use cookies to serve ads based on your prior visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads based on your visits to this site and/or other sites on the internet.

You can opt out of personalised advertising in Google Ads Settings or at aboutads.info. See how Google uses information from sites that use its services. Visitors in the EEA, UK and Switzerland are asked for consent before any personalised ads are shown.

Your rights

You can ask us what we hold about you, or to delete it, at any time: hello@galenelabs.com.

Changes

If this policy changes, the updated version will be posted on this page.