Personal data

Privacy policy

Last updated: November 6, 2026

1. Who we are

RG Séances is an online booking application used for the one-to-one sessions (interview, mystical guidance, Sufi dance lesson) of Rana Gorgani – Danse Soufie on danse-soufie.com. It was designed by Varika Agency.

The data controller is Rana Gorgani – Danse Soufie. Contact: info.ranagorgani@gmail.com.

2. Two kinds of people

  • The site administrator (Rana Gorgani or the person she designates): the only person who connects a Google account to the application, once, to link their own calendar.
  • People booking a session: they fill in a booking form. They do not sign in with Google, and the application accesses none of their Google data.

3. Google user data the application accesses

When the administrator connects their Google account, the application requests two permissions (“scopes”):

ScopeWhat the application doesWhy
…/auth/calendar.freebusyAsks Google for the busy time slots of the chosen calendar (free/busy service: start and end of each slot, without title or content).Never offer a time slot that is already taken in the organiser’s calendar.
…/auth/calendar.eventsCreates an event for each confirmed session (with a Google Meet link) and deletes it if the session is cancelled. It does not modify or delete any other event.Automatically add each session to the calendar and send the video link.

The application does not read the title, description, attendees or content of your other events. It does not access Gmail, contacts, Drive or any other data of your Google account.

4. Data written to the Google calendar

For each confirmed session, the application creates in the administrator’s calendar an event containing: the session name and the name of the person who booked, their e-mail address (invited to the event, with the invitation sent by Google), their phone number and country if provided, their time zone, the amount paid, any message they entered, and the Google Meet link. This information comes from the booking form, not from Google.

5. Limited Use disclosure

RG Séances’ use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

In practice: Google data received is used only to provide the features described above. It is not sold or transferred to third parties (except where required by law), not used for advertising, and not used to train artificial intelligence or machine learning models. No human reads it, except for security purposes, to comply with the law, or with the administrator’s explicit consent.

6. Where and how this data is stored

  • The Google authorisation token (“refresh token”) is stored in the database of the administrator’s WordPress site, on the site host’s server. A short-lived access token (under one hour) is cached.
  • The busy slots received from Google are cached for five minutes, then discarded.
  • The ID of the created event and the Meet link are stored with the booking.
  • Exchanges with Google are encrypted (HTTPS). Access to the application’s settings is restricted to site administrators.

7. Data of people who book

To manage a booking, the application stores: name, e-mail address, phone number (optional), country, message (optional), time zone, session, date, amount and status. Payment is processed by Stripe: card numbers never pass through the site and are never stored by the application.

This data is used only to confirm and manage the session, send e-mails (confirmation, reminder, cancellation, refund), issue a receipt, and meet legal and accounting obligations.

8. Recipients

  • Google (Calendar and Meet): to create the appointment and invite the person who booked.
  • Stripe: payment and refund processing.
  • The site host and e-mail delivery service: storage and sending of messages.

No data is sold or shared for commercial purposes.

9. Retention

  • Google token: until the administrator disconnects the calendar (see below), which revokes it with Google and deletes it from the site.
  • Bookings: as long as needed to manage sessions and meet legal obligations, including accounting. They can be deleted earlier on request, unless the law requires retention.

10. Your rights and how to remove Google access

  • Remove access to your Google account: in the application (Sessions › Settings › Google Calendar › “Disconnect”), or at any time at myaccount.google.com/permissions by removing “RG Séances”.
  • GDPR rights: access, rectification, erasure, restriction, objection and portability. Write to info.ranagorgani@gmail.com; we reply within 48 working hours in practice, one month at most.
  • If you disagree, you may lodge a complaint with the French data protection authority, the CNIL (cnil.fr).

11. Cookies

The application uses no advertising or tracking cookies. The Stripe payment form may set cookies strictly necessary for security and fraud prevention.

12. Changes

This policy may change, for example if the application requests new Google permissions. The date of the last update is shown at the top of the page.

HomeGoogle data usePrivacy policyTerms of service

© 2026 Rana Gorgani – Danse Soufie · Application designed by Varika Agency

Google Calendar, Google Meet and Google are trademarks of Google LLC. RG Séances is an independent application and is not affiliated with Google.