0. The two connections at a glance
- Feature status
- Customer sign-in remains available; the booking Calendar integration has ended.
- Scopes requested for customer sign-in
- openid · email · profile
- Not accessed in customer accounts
- Gmail · Drive · Calendar · Contacts
- Effective date
- 16 August 2026
1. Scope and the two connections
A. Customer Google sign-in
Used when customers register or sign in with their own Google accounts. Accounts are verified through Google Identity Services and Firebase Authentication.
B. Discontinued booking Calendar integration
This feature previously handled bookings through the operator’s separate work Google account. It no longer checks consultation availability, creates, changes or cancels events, invites attendees or issues Meet links.
The two connections differ in their accounts, permissions, purposes and stored information. Integration with the operator’s Calendar does not mean access to a customer’s Google Calendar.
2. Information requested for customer Google sign-in
- openid
- A unique identifier distinguishing the Google account and user
- Primary email address and email-verification status
- profile
- Basic profile information provided by the Google account, such as display name and profile photograph
Only openid, email and profile are requested from customer Google accounts. NexSupply does not access Gmail message content or sending permissions, Drive files, Calendar events or Contacts in those accounts.
3. Use of customer Google sign-in information
- NexSupply registration, sign-in and maintenance of secure sign-in sessions
- Account identification, email verification and assistance with member profile information
- Account approval, customer support, misuse prevention and security checks
Storage
Authentication identifiers and basic account information are stored in Firebase Authentication and NexSupply member records until membership termination or a deletion request is processed. Information subject to statutory retention is stored separately only for the applicable period.
Raw tokens
Raw Google access tokens from the customer sign-in process are not separately stored in NexSupply’s business database.
Google sign-in information is not sold or used for personalised advertising, credit assessments or AI model training. It is not disclosed to third parties except to meet legal obligations or for the disclosed entrusted operation of the service.
4. Retention and human access
- Category
- Basic customer sign-in information
- Retention basis
- Until membership termination or a deletion request, or for the statutory retention period
- People permitted to access
- Authorized staff requiring access for account approval, customer support, security or legal responses
- Category
- Previously stored operator OAuth credentials
- Retention basis
- Stored in encrypted form; not automatically deleted when the feature ended; separate deletion may be requested
- People permitted to access
- Authorized administrators; booking synchronisation has ended
- Category
- Previous consultation Calendar events
- Retention basis
- Until the external event is deleted or under Google’s retention rules; not automatically cancelled
- People permitted to access
- Operations staff and customers invited to the event
| Category | Retention basis | People permitted to access |
|---|---|---|
| Basic customer sign-in information | Until membership termination or a deletion request, or for the statutory retention period | Authorized staff requiring access for account approval, customer support, security or legal responses |
| Previously stored operator OAuth credentials | Stored in encrypted form; not automatically deleted when the feature ended; separate deletion may be requested | Authorized administrators; booking synchronisation has ended |
| Previous consultation Calendar events | Until the external event is deleted or under Google’s retention rules; not automatically cancelled | Operations staff and customers invited to the event |
Staff do not access Google user data at their own discretion except where required by law, necessary to respond to a security incident, or explicitly requested by the user.
5. Discontinued consultation-booking Calendar integration
Website consultation booking and the Google Calendar integration used for bookings have ended. No new booking-related event retrieval, creation, modification or deletion, attendee invitations or Meet-link creation is performed.
Previously stored booking records, encrypted credentials and external Calendar events are not automatically deleted or cancelled solely because the feature has ended. Customer Google sign-in is separate and remains available.
6. Revoking access and deleting data
1) Revoke the customer Google connection
Customers can revoke NexSupply’s access through the connections settings in their Google account. Revocation stops subsequent authentication through Google but does not automatically delete NexSupply member information.
2) Disconnect the operator’s Calendar integration
Booking Calendar synchronisation and in-app integration management have ended. External Google permissions are not automatically revoked and can be revoked separately through the work Google account’s connections settings. Deletion of stored credentials can be requested at the email address below.
3) Delete consultation events
Existing external Calendar events are not automatically cancelled or deleted because the feature ended. Contact the responsible staff about existing events. Emails already sent may remain in recipients’ mailboxes.
4) Request deletion of NexSupply member information
Requests for access, correction, deletion or suspension of processing can be sent to the email address below. Following identity verification, the outcome is generally communicated within 10 days. Information subject to statutory retention is stored separately for the applicable period.
7. Compliance with Google policies
Minimum permissions and limited use
Google user data is accessed, used, stored and shared only to the extent needed to provide the disclosed features. Where applicable, NexSupply complies with the Limited Use requirements of the Google API Services User Data Policy. If new Google permissions become necessary, this disclosure will be amended before they are used and separate consent will be obtained through the Google consent screen.
8. Document information and related policies
- Document version
- 2026-08-16-v3
- Effective date
- 16 August 2026
- Operator
- NexSupply · Representative: Myungjun Kim
- Contact
- k.myungjun@nexsupply.net