Privacy policy

Who we are

Directive Domains Pte Ltd operates the Directed Domains website. For privacy questions or requests, email sam@directeddomains.com.

This policy covers this public website, inquiries sent to us, and the shared Google-connected features described below. Samuel Bourque operates those connected features under the Directed Domains name. Separate notices may apply to other features of client projects and connected services.

Website visits and inquiries

This public website does not currently offer account registration or Google sign-in. Its contact links open your email application. If you email us, we receive your email address, message, and any other information you choose to send. We use that information to respond and discuss the services you request.

The website is hosted on Vercel. Technical request information, such as IP addresses, browser information, requested pages, and request times, may be processed to deliver the website, diagnose problems, and protect it from abuse.

Cookies and tracking

The public website does not currently include advertising trackers or analytics tools, and its application code does not set visitor cookies. Hosting infrastructure may process technical information for delivery and security.

Google-connected services

The shared Directed Domains Google app is used by separate services. Where Google sign-in is offered, it uses basic account information such as your name, email address, and profile image to identify you and control access. Sign-in uses session cookies. Google sign-in alone does not grant access to Gmail, Drive files, or Calendar.

The shared sign-in is used by services including DX Complete, FCNBC, Seabaeho and sambourque.com. DirectedDomains.com itself does not read Google Calendar data. Only the configured calendar owner connects a calendar for personal meeting bookings on sambourque.com. Visitors do not need a Google account or grant access to their calendars.

We do not sell Google user data, use it for advertising, or use it to train general-purpose AI models. Our use and transfer of information received from Google APIs will follow the Google API Services User Data Policy, including its Limited Use requirements.

Meeting bookings on sambourque.com

The calendar connection checks busy periods, reads events created by the booking service to confirm their status, and creates meeting events and Google Meet links. Google grants permission for events on calendars the owner owns; the booking service uses the configured owner calendar. Visitors see available times, not private event titles or descriptions.

A booking collects your name, email address, selected time, duration, time zone and optional note. These details arrange the meeting, support invitations and organizer notifications, and help prevent conflicting or abusive bookings. Please avoid sensitive information in optional notes.

The booking website runs on Vercel. MongoDB stores booking records and an encrypted calendar refresh token. Google processes calendar events, invitations and Meet links. Resend processes organizer notification emails, including booking details, and service-outage alerts. Meeting information is shared with the organizer and invited participant as needed to arrange the meeting. Rate-limit identifiers are hashed with a secret key.

The booking database marks meeting records for automatic deletion 90 days after the meeting ends. Short-lived rate-limit records and outage-alert records expire separately. Calendar events and delivered emails remain in the relevant accounts until removed under those services’ controls. Deleting a website record does not delete these copies.

The owner’s encrypted calendar authorization remains stored while the connection is configured. The owner can revoke it through Google Account connections or contact us to request removal of the stored connection. Revocation stops future authorized access; it does not remove existing meetings or booking records.

Access, retention, and your choices

Authorized operators and service providers may process information as needed to respond to inquiries, operate and secure the website, or meet legal requirements. Providers may process information outside Singapore. Where applicable, we require protection comparable to the Singapore Personal Data Protection Act. Linked websites handle other information under their own privacy policies.

Contact us to withdraw consent or request access, correction, or deletion of information we hold. We may need to verify your identity before acting. We retain inquiry and account information only while needed for the purposes described here or a legal or business requirement. The 90-day booking schedule does not apply to email inquiries or hosting records.

You can review or revoke a separate service’s Google access in your Google Account connections. Revoking access stops future authorized access; it does not itself delete information already held by that service.

Changes

We will update this policy when the described practices change. If we introduce a new use of Google data that requires consent, we will explain it and request the required authorization first.