Flowko Rezervacije

Last updated: September 2026

Online appointment booking for businesses and sole traders in Slovenia. "Rezervacije" is Slovenian for "bookings". Flowko Rezervacije is developed and operated by Flowko (David Vojvodić s.p.), Murska Sobota, Slovenia.

Slovenska različica · Privacy policy · Terms of service

What Flowko Rezervacije is

Flowko Rezervacije is a web app that lets your customers book an appointment with you themselves. It runs at booking.flowko.si: each provider has its own booking page, and you can also embed the booking form in your own website.

How a booking works:

The customer picks a service and a free slot and enters the details the form asks for.
The customer, you, and any guests the customer adds receive a confirmation by email. We send confirmations and notices from rezervacije@flowko.si through our email delivery provider Postmark (USA), not through Google.
The customer can reschedule or cancel through the link in the confirmation. We notify you of the change by email.

We calculate free slots from the working hours you set in the app. If you connect Google Calendar, we also take into account the times when you are busy there.

Who it is for

Businesses and sole traders in Slovenia that work by appointment, for example dental practices, veterinary clinics, salons, consultants and real-estate agencies.

There is no public sign-up. We open your user account once we have signed a service contract and a data processing agreement with you.

Connecting Google Calendar (optional)

The app works without it. If you connect Google Calendar:

customers cannot book a slot when you are already busy in the calendars we check;
we write every confirmed booking as an event into the calendar you chose, and update or delete that event when the booking is rescheduled or cancelled. We do not change or delete any other events.

How to connect

Sign in at booking.flowko.si and choose Google Calendar in the calendar settings or under Apps.
Before we send you to Google, a "Connect Google Calendar" window opens with this notice:
"Flowko Rezervacije will read the list of your calendars and the times you are busy in the calendars you choose, and will create, update and delete the events for bookings made through it. It does not read the contents of your other events. See section 3.3 of the privacy policy."
"Continue" takes you to Google's consent screen. "Cancel" stops without connecting.
Google shows its consent screen with the two permissions described below. We set up the connection only if you grant both. If you do not, we do not set up the connection and do not store the token we received.
After connecting, we automatically use your primary calendar for checking availability and as the calendar we write bookings to. You can change both under Apps → Installed apps → Calendars, where you can also choose other calendars for us to check.

Permissions we request

Permission (Google's description) What we use it for

https://www.googleapis.com/auth/calendar.readonly: "See and download any calendar you can access using your Calendar." Only three kinds of reads: (1) the times when you are busy (start and end only) in the calendars we check; (2) the list of calendars in your Google Calendar, including other people's shared calendars, so you can choose which ones we check and which one receives bookings; (3) your primary calendar's details when you connect (we use only its identifier), and its identifier again when you reconnect or disconnect, when your user account is deleted, or when we discard a token we received, so we can recognise the same Google Account. We also read that identifier when another booking.flowko.si user disconnects Google Calendar, when their user account is deleted, or when we discard a token we received when they connected, if their primary calendar is one we check for you or write your bookings to.

https://www.googleapis.com/auth/calendar.events: "View and edit events on all your calendars." Creating, changing and deleting events for the appointments your customers book. We change and delete only the events we created for bookings.

Permission (Google's description)	What we use it for
`https://www.googleapis.com/auth/calendar.readonly`: "See and download any calendar you can access using your Calendar."	Only three kinds of reads: (1) the times when you are busy (start and end only) in the calendars we check; (2) the list of calendars in your Google Calendar, including other people's shared calendars, so you can choose which ones we check and which one receives bookings; (3) your primary calendar's details when you connect (we use only its identifier), and its identifier again when you reconnect or disconnect, when your user account is deleted, or when we discard a token we received, so we can recognise the same Google Account. We also read that identifier when another booking.flowko.si user disconnects Google Calendar, when their user account is deleted, or when we discard a token we received when they connected, if their primary calendar is one we check for you or write your bookings to.
`https://www.googleapis.com/auth/calendar.events`: "View and edit events on all your calendars."	Creating, changing and deleting events for the appointments your customers book. We change and delete only the events we created for bookings.

Google describes calendar.readonly more broadly than we use it. We use it only for the three reads listed above. We request no other permissions for your Google Account.

What data we read, write and store

Data	What we use it for	Do we store it?
Times when you are busy (start and end only)	Calculating free slots and preventing double bookings; showing you your busy times when you are signed in (on a booking page, if you turn on the display of your own calendar, and in the availability troubleshooter)	No. We fetch them for each calculation.
Calendar list (identifier, name, primary-calendar flag, your access level, time zone) and basic details of your primary calendar	Choosing which calendars we check and which calendar we write bookings to; recognising the same Google Account	Only the identifier of your primary calendar (usually your Google email address) and the identifiers of the calendars you select.
Booking events	Writing, updating and deleting the appointment in your calendar	For each booking, the event identifier and the calendar identifier, for as long as we keep the booking (section 3.4 of the privacy policy), also after you disconnect.
Tokens Google issues to us (access token and refresh token), granted permissions and expiry time	Accessing your calendar when you are not signed in (for example, when a customer books)	Yes, until you disconnect or your user account is deleted.

We do not read the contents of other events in your calendar (titles, descriptions, attendees, locations): for those, Google tells us only the start and end of the times when you are busy. On the booking page, your customers see only which slots are free.

The event we create for a booking names your calendar's identifier (usually your Google email address) as the organizer. Its title usually contains the customer's name. Its description contains the booking details: the customer's name, email address and phone number, the names and email addresses of their guests, the location, notes, form answers, the reschedule reason and a link for managing the booking. Unless you turn on the "Hide organizer's email" setting, the customer and their guests are listed as attendees. We instruct Google not to send attendees invitations or notifications; according to Google's documentation, Google may still send some emails.

If we cannot update your calendar when a booking is made, rescheduled or cancelled (for example, because of an error at Google), the change still happens in the app, but the entry in your calendar is missing or out of date. A cancellation goes through even when the connection is not working.

When we cannot read your calendar

We do not treat a calendar we cannot read as free. While we cannot read it, your booking page shows no free slots, so that nobody books a time that overlaps your existing appointments. This happens:

when the connection stops working because you revoked access at Google or the permissions expired. We mark the connection as invalid and send you one email, in your account's language, with the subject "The connection to Google Calendar is not working". Free slots return once you remove the old connection with "Remove app", or reconnect the calendar with the same Google Account; if the old connection still shows an error after you reconnect, remove it with "Remove app";
when a calendar we check no longer exists in Google Calendar or is no longer shared with you;
during a technical fault on our side that stops us from accessing the stored tokens.

If your booking page shows no free slots and you cannot find the reason, write to rezervacije@flowko.si.

What we do not do

We do not sell data from your Google Calendar.
We do not use it for advertising.
We do not use it to develop, improve or train artificial-intelligence or machine-learning models.
We share it only with our hosting company Railway and its sub-processors, which store it on our behalf as processors, and with the attendees of the booking events we create, to the extent described above; with anyone else only when the law requires it.
We and our contractors do not look at your Google Calendar data unless you explicitly ask us to (for example, to resolve a problem you report), it is necessary for security purposes (for example, investigating a bug or abuse), or it is required by law.

Where and how we store it

The application and the database run with our hosting company Railway Corporation in its EU West region in Amsterdam, the Netherlands. Railway is a US company that operates its service largely from the USA, so the data may also be processed in the USA; the legal basis for this transfer is described in section 3.3 of our privacy policy. The app is reached over an encrypted HTTPS connection, and the database is not reachable from the public internet. Google Calendar tokens (access and refresh tokens) are stored encrypted (AES-256-GCM); the encryption key is not stored in our database. Deleted data may remain for up to 6 more days in the daily database backups.

Disconnecting and revoking access

You can disconnect at any time:

Sign in at booking.flowko.si and open Apps → Installed apps → Calendars (booking.flowko.si/apps/installed/calendar).
Next to Google Calendar, choose "Remove app".

We then delete the tokens and calendar settings from our database and ask Google to revoke our access. Events we have already written to your calendar remain there. The event and calendar identifiers stored with bookings are kept with the bookings and deleted with them or with your user account.

We do not ask Google to revoke access if another Google Calendar from the same Google Account is still connected to your user account, if we determine that the same Google Account is also connected to someone else's booking.flowko.si user account, or if a permanent technical fault means the stored token cannot be read. We attempt revocation only once: if it fails or cannot be made, we do not retry it. We therefore recommend that you also check or revoke Flowko Rezervacije's access at myaccount.google.com/connections.

If a technical problem on our side prevents removal at that moment, you see "This Google Calendar connection can't be removed right now. Please try again later." The connection and its tokens then stay stored, so that we can revoke access at Google when you remove the connection again.

If you revoke access only at Google, we do not delete the connection from our database automatically: once Google rejects the token, we mark the connection as invalid and tell you by email (see "When we cannot read your calendar"). Remove it from Installed apps as well.

You can request deletion of your user account at rezervacije@flowko.si. On deletion we ask Google to revoke access, except for connections already revoked at Google, for a Google Account that we determine is also connected to someone else's user account, and for connections whose stored token we cannot read because of a technical fault. We do not retry a revocation that fails or cannot be made. We then delete the account together with its tokens and bookings. Events we have already written to your calendar remain there.

Google Limited Use

Flowko Rezervacije's use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

The use of information received from Google Workspace scopes will adhere to the Google User Data Policy, including the Limited Use requirements.

Privacy and terms

We are the controller of your Google Calendar data. Section 3.3 of our privacy policy describes in detail how we process it; section 3.4 covers the data of customers who book with you. Use of the service is governed by the service contract and the data processing agreement we sign when we open your user account.

Privacy policy: https://flowko.si/privacy (the English text of section 3.3 is at the end of that page; full English version, including section 3.4: https://flowko.si/en/privacy)
Terms of service: https://flowko.si/terms (English: https://flowko.si/en/terms)

Contact

David Vojvodić s.p., Flowko
Ulica Daneta Šumenjaka 2A, 9000 Murska Sobota, Slovenia
Email: rezervacije@flowko.si

Google Calendar is a trademark of Google LLC.

← Back to home