Verification Notice: This documentation is provided for app store review teams (Google API Verification, Microsoft Partner Center, and Zoom App Marketplace). For additional compliance questions, please contact our support team at [email protected].
Google Calendar & Meet Integration
Automated synchronization and Google Meet generation
SlotMate integrates with the Google Calendar API to allow Shopify merchants to connect their calendars. This ensures the app can synchronize merchant availability and create calendar invites for booked services automatically.
OAuth Scopes Requested
| Scope URI | Purpose |
|---|---|
| .../auth/calendar.readonly | Read-only access to existing events. Used to check busy time slots to prevent double-bookings. |
| .../auth/calendar.events | Create, read, update, and delete calendar events. Used to write new customer bookings and manage rescheduling or cancellations. |
| .../auth/userinfo.email | Retrieve Google account email address. Used to identify and label which account is currently synchronized. |
How it works & Data Flow
- Checking Availability: Before displaying available slots to a client on a merchant's booking widget, SlotMate queries the merchant's connected Google Calendar. Only the busy time ranges are checked; no meeting details (like titles, guests, or description) are saved or cached.
- Creating Bookings: When a customer books an appointment, SlotMate generates a new event in the merchant's Google Calendar.
- Google Meet Integration: If the merchant enables video conferencing, SlotMate sets the event location to Google Meet via the Google Calendar API conferenceData parameter, attaching a dynamic Meet link to the invite.
Microsoft Outlook & Teams Integration
Outlook calendar sync and Microsoft Teams video links
The Microsoft Graph API integration allows SlotMate users to link their Microsoft 365 or Outlook.com accounts to sync appointments and create Microsoft Teams online meetings.
OAuth Scopes Requested
| Scope Name | Purpose |
|---|---|
| Calendars.ReadWrite | Allows SlotMate to read existing Outlook calendar busy blocks and write new bookings, updates, and cancellations. |
| OnlineMeetings.ReadWrite | Used to dynamically create online Microsoft Teams virtual meetings when customers schedule virtual appointments. |
| User.Read | Read-only account profile. Used to identify the authenticated Microsoft account email. |
How it works & Data Flow
- Outlook Sync: Reads Outlook calendar availability blocks to overlay them onto the Shopify store scheduling availability widget.
- Teams Conferencing: When a user chooses "Microsoft Teams" for the booking service, SlotMate initiates a Graph API request to generate a unique meeting ID and joins URL, which is shared automatically with both host and customer.
Zoom Meeting Integration
Automated video conference generation
Through the Zoom App Marketplace, SlotMate connects to the merchant's Zoom account to generate video call links for online consulting sessions, virtual services, or webinars.
OAuth Scopes Requested
| Scope Name | Purpose |
|---|---|
| meeting:write | Allows SlotMate to create, modify, and delete meetings. Meeting details are updated if a booking is rescheduled or canceled. |
How it works & Data Flow
- When an appointment is successfully scheduled in SlotMate, the system creates a corresponding virtual meeting in the merchant's Zoom dashboard using their secure OAuth access tokens.
- The Zoom meeting invite details and link are passed directly to the Shopify database to be emailed to the customer.
Data Usage & Protection
At SlotMate, data security and privacy are our highest priorities. All third-party OAuth integrations comply with the following standards:
- Secure Storage: Credentials and refresh tokens are encrypted at rest using AES-256 standards before being stored in our secure database.
- Minimal Scopes: We only request the minimum permissions necessary to facilitate scheduling and meeting creation.
- No Selling: We do not sell, rent, or transfer any user data from third-party APIs to marketing platforms or brokers.
- Ephemeral Access: Calendar items checked during busy time scans are never cached or saved. They are processed on-the-fly.
Disconnecting Integrations & Revoking Access
Users can easily disconnect integrations like Google Calendar, Microsoft Outlook, or Zoom from SlotMate at any time, or revoke permissions directly from their provider accounts.
Disconnect via SlotMate (Shopify Admin)
Manage connected staff calendars and profiles
- 1Open SlotMate in Shopify Admin.
- 2Go to Teams / Staff settings.
- 3Open the staff profile connected to the integration.
- 4Find Google Calendar, Microsoft Outlook, or Zoom.
- 5Click Disconnect.
- 6Confirm the disconnection.
What happens after disconnection?After disconnection, SlotMate deletes the stored OAuth access and refresh tokens associated with the selected connected account. SlotMate will no longer create, update, reschedule, cancel, or synchronize meetings/calendar events for that disconnected provider. Existing customer booking records remain available in SlotMate, but the integration will be marked as disconnected.
Revoke Access Directly via Third-Party Platforms
If needed, you can revoke permissions directly from your provider/account settings.
Zoom Marketplace
- Open the Zoom App Marketplace and sign in.
- Click Manage in the top-right corner.
- Open Added Apps.
- Find SlotMate Booking App.
- Click Remove.
- Confirm the removal.
Google Permissions
- Open Permissions page.
- Sign in with the connected Google account.
- Find SlotMate Booking App.
- Click Remove access.
- Confirm removal.
Microsoft Account
- Open myapps.microsoft.com.
- Sign in with the connected Microsoft account.
- Find SlotMate Booking App.
- Open app details or manage access.
- Remove/revoke the app permission.
Enterprise & Organization Accounts: For work or school Microsoft accounts, the organization’s Microsoft 365 administrator may also manage or revoke the app from the Microsoft Entra admin center.