How to build a team meeting scheduler with Lovable
Turn plain-text prompts into a scheduler for your whole team. Define hosts, weekly hours, round robin and collective meetings, a booking write that cannot double-book, and Google Calendar sync without leaving your browser.
Lovable
$ I want one booking page for my team: each person’s own hours in their own time zone, meetings shared out by round robin, meetings that need two of us at once, group sessions with a seat limit, a link that lets clients move or cancel, and our Google Calendars kept in step.
- Tables designed in chat
- Availability and booking built
- Ready to preview
What a team meeting scheduler actually is
A shared diary with a front door. It has to know who can take each kind of meeting, when each of them works in their own time zone, what their calendar already holds, and who else is booking right now, and be right about all four when a stranger picks a time.
Most small applications store what people type and give it back later. A scheduler is different, and the difference shapes every decision below: what it offers is somebody’s time, each slot exists once per person, and the answer to “is Thursday at ten free” depends on a calendar the app does not own and can change while the visitor is looking at the page.
It is also why most readers arrive already renting one, and paying for it by the head. The rate per person is modest on its own. What a growing team meets later is that the features which make it a team tool, handing bookings round and meetings that need two people at once, often sit a plan above the one they started on, so hiring and growing are both line items.
What makes it hard to build is not the grid of times. The grid is a conclusion: each host’s weekly hours in their own zone, minus their days off, minus the gaps around meetings they already have, minus anything inside your notice period, minus what their Google Calendar says, and then, for a team meeting, combined across hosts. That conclusion has to hold when two people act on it in the same second.
Hours belong to people, not to the business
A company-wide nine to five works until the first host lives somewhere else. Weekly hours are stored per person, in that person’s time zone, and turned into real moments for each date, so a Friday in London and a Friday in New York are two different sets of hours that happen to share a name.
The meeting type decides who is asked
One-on-one asks one host. Round robin asks every host in the rotation and picks one when the booking arrives. Collective asks every host and offers only the times they all share. A group session asks one host and counts seats. The visitor sees the same page each time, with four different questions underneath it.
The other calendar is the one people trust
Your hosts live in Google Calendar, not in your app. A dentist appointment added there this morning has to block the slot on your page this afternoon, and a booking made on your page has to appear there with its video link. Both directions fail quietly when they fail, so both deserve a test of their own.
Why time zones come first
Nearly a third
of meetings now span more than one time zone, up 35% since 2021, according to Microsoft’s June 2025 analysis of anonymised Microsoft 365 activity. That is measured across large organisations rather than small teams, but the shape travels: the moment one host or one client is somewhere else, a scheduler that thinks in a single zone is showing somebody the wrong hour.
Microsoft WorkLab, Work Trend Index special report, June 2025 · checked published June 2025
The parts every team scheduler is built from
One of these six is the product and the other five are built around it. If you read only one, read the first: it is where the build time goes and where the embarrassing failures come from.
Free times worked out from each host’s own rules
For each date, take the host’s weekly hours in their own time zone, drop the dates they marked off, cut what remains into start times at the interval you chose, then remove anything inside your notice period, anything that would run into one of their existing meetings once the gaps before and after are added, anything their Google Calendar marks busy, and any day where they have already reached the limit you set. What survives is what you may offer. Every one of those inputs lives on the server, so the answer does too, and the browser is told rather than asked.
A meeting type is a set of rules, not a name
A 15-minute intro call and a 90-minute workshop want different notice, different gaps either side, a different daily limit and different questions in the form. Put those rules on the meeting type rather than in one global setting, along with where the meeting happens, and the same host’s Tuesday produces a different set of times for each.
One write that cannot double-book a host
Two visitors pick the same 10am with the same host, and both press the button within a second. The server has to work the times out again inside the write rather than trusting what either page was shown, and the database should refuse two confirmed meetings that overlap for the same person whatever the code above it gets wrong. With both in place there is nothing to hold and nothing to sweep up afterwards: the second booking is simply told the time has gone.
Round robin with a rule you can explain
When a booking could go to any of four hosts, something picks one, and sooner or later a host asks why the last three went to somebody else. Fewest recent bookings first, or a fixed order of priority, are both defensible. What matters is that the rule is written down, a host can be taken out of the rotation for a fortnight, and each booking records who got it.
A link that manages the booking without an account
A client will want to move the meeting or call it off, and will not make an account to do it. The confirmation carries a link that does both. It stands in for a password, so it is long and random and stored only as a hash, and moving the meeting should update the invitation already in their calendar rather than sending them a second one.
A booking page that goes where your clients are
Most bookings start somewhere other than your booking page: a pricing page, a proposal, a signature in an email. An embed that sits inline on your own site, opens as a popup from a button, or hangs off a text link puts the same page wherever the client already is, with your logo and colour rather than somebody else’s.
Build it once or pay for every host
Scheduling tools price per person who can be booked, from $10 to $28 a user a month across the first three below. Count the hosts you expect next year, not this year, before choosing.
Build your own
An app you own has no meter on the team. Nobody counts your hosts, and round robin is a setting on the team page rather than a reason to change plan. With an AI coding tool writing the slot engine, the booking write and the access rules, that build is weeks rather than quarters.
- The sixth host joins the rotation without anybody reopening the budget
- Round robin, collective meetings and group sessions are parts of the app rather than parts of a pricing tier
- Your booking page lives on your own domain and inside your own site, not on a vendor’s subdomain
- Every booking, answer and cancellation reason sits in your own database, queryable without an export
- How round robin chooses, how much notice you need and how long a gap to leave are your rules to write
- The invitation a client receives carries your name and your reply-to address, and nobody else’s logo
Rent the scheduler
Calendly · Cal.com · SavvyCal · Chili PiperWhat renting buys is years of scheduling machinery, and some of it is genuinely tedious to reproduce: sync with Outlook and iCloud as well as Google, deposits, packages and invoices, routing that hands a lead to your CRM, and a support team for the week a calendar stops syncing.
- Working the day you sign up, with every calendar provider already connected and verified
- Outlook, Microsoft 365 and iCloud calendars, where this template connects Google Calendar only
- Deposits, packages, coupons and invoices, where this template takes the full price by card at booking
- Texts through any provider you like, where this template sends them through Twilio only
- CRM hand-offs and territory routing for a sales team, where deciding who takes the lead is the product
- Every one of the four bills per person, so the price moves each time the team does
The name most clients already recognise, and the clearest example of the tier gap: round robin and team scheduling are on Teams and Enterprise only, so the Standard seat does not cover a team that shares bookings. Free allows “One event type” and “One calendar connection”. Both positions of the billing toggle were read, and yearly billing saves 17% on Standard and 20% on Teams. Enterprise “Starts at $15k /yr” and at 50 seats.
calendly.com · checked September 2026
The closest match to this template. Its Teams plan lists “Round-robin scheduling”, “Managed & collective event types” and “Routing forms”, with a 14-day trial. Free is genuinely free for one person, with unlimited event types and calendars, so the meter starts the day a second person joins. The page prints yearly figures only and advertises a 25% saving on them, so the month-to-month rate is higher than the one quoted here, and we have not guessed at it.
cal.com · checked September 2026
Included because it removes the tier argument and leaves only the meter: Basic already carries “Team scheduling”, “Round Robin Mode” and “Group Mode”, so a team pays the entry rate for every person and nothing more. Custom domains and paid bookings are on Premium. There is no free plan, only a trial and a “30-day money back guarantee”. Both billing positions were read, and paying annually saves two months.
savvycal.com · checked September 2026
The other end of the market, where sending a lead to the right salesperson is the product rather than a feature. The entry plan includes “Up to 15 seats”, with “$45/seat/mo after that”, and the FAQ is plain about terms: “Monthly billing is not available at this time.” It is here to show what the category charges when distribution is the whole point. If that is your problem, the round robin in this template is a starting place rather than a replacement.
chilipiper.com · checked September 2026
Rule of thumb: if your hosts live in Outlook, your sessions are sold as packages or with deposits, or your leads have to reach a CRM the moment they book, rent. Those are real products, and none of the three is a weekend of describing. If what you need is one page for the team, bookings that reach the right person, and a bill that stays put when you hire, that is the half worth owning. One figure worth weighing either way, with its source in view: in a survey Calendly commissioned in mid-2024 of 1,244 workers in the US and UK, 43% said they spend at least three hours a week just scheduling meetings, up from 36% the year before. A scheduling vendor has an interest in that number, and it still describes a week most readers will recognise.
Why build with Lovable
A working app needs more than screens: something has to store what people enter, decide who may see it, and reject what does not make sense. That part is where a solo build stalls, not the parts a user sees.
Lovable turns that work into a conversation: describe a screen or a rule in plain language and watch it appear in the live preview, in the same tab:
Prompt
Say what you want to add or change, in plain language.
Watch
The live preview rebuilds in the browser as Lovable writes the code.
Try it
Click through the real app, with real buttons, forms and data rather than a mockup.
Refine
Select what’s off and describe the fix, or ask for what’s next.
None of that requires a computer science background or writing code, and the whole build happens in one browser tab, one request at a time.
Data & backendhandled automatically
Connect your database in a single step, right from the chat. Lovable builds the tables, sets up the logins, writes the server-side functions, and turns on live updates, each one an ordinary request in plain language, not a separate tool to learn.
Click to point instead of describing where
Select any element in the live preview with Lovable’s Select elements tool, and your next message applies to exactly that piece.
Full ownership and complete privacy
The app and the records in it are yours. Every change is saved automatically, and the repository Lovable syncs to GitHub is private on every plan, with no technical setup and not one Git command.
Pay a developer, or do it with AI
Commercial schedulers bill for every person on the booking page. Count the hosts you expect to have in two years, because that headcount is the line that drives your bill.
Hire a developer
Custom build, from scratch- Developer
- ~$12k-$46k
- Supabase (backend)
- Free tier · $25/mo (Pro plan)*
- Hosting
- $0 free tier
- Build time
- ~230 hrs of their work
~$12k-$46k to build, then from $25/mo after launch
Our ~230-hour estimate at market rates. The survey linked below puts senior US developers at $100-$150+ an hour and records agencies charging 20-40% above the freelancers they compete with, which is what makes $50/hr and $200/hr the honest ends of the range. Most of those hours sit where no screenshot shows them: the slot engine across hosts and time zones, the write that refuses a double booking, and the Google connection with its tokens kept on the server. That is the usual reason a quote for “a booking page” comes back at several times what the mockups suggest.
Build it with Lovable
From scratch, with Lovable- Lovable
- Free (30 credits/mo) to $25+/month (Pro, from 100 credits)
- Backend (Supabase)
- Free tier · $25/month (Pro plan)*
- Hosting
- $0 on a Lovable subdomain
- Your time
- ~110 hrs
Free to try the idea, ~$25-$50+/month on Pro while you build a real one, then whichever credit tier you keep using
Lovable bills by credits, so what you pay tracks what you build: importing the pre-built template can fit inside the Free plan’s 30 credits a month, while a full from-scratch build burns through Free fast and usually needs Pro. Pro’s entry rung is $25/month (or $250/year, roughly $21/month effective) for 100 credits, the bottom of a ladder where 200 credits runs $50/month (or $500/year, about $42/month), and a multi-session build often lands on that rung or higher rather than the entry price.
* The free-tier line that matters here is the pause, not a storage number. Free gives you a 500 MB database, 1 GB of file storage and 5 GB of egress a month, and bookings are small enough that only your logo and cover image ever touch the storage figure. The pause is different: a free project stops after a week with no activity, and a booking page that has gone to sleep is a team that looks unavailable. From $25/mo, Pro removes the pause, raises egress to 250 GB (then $0.09 per GB), and keeps a daily backup for 7 days.
Neither column above grows with the team. The tenth host costs what the second one did, so after launch the only line that can move is an AI model you choose to call, and only if you add a feature that uses one.
Prices and rates from supabase.com, developex.com and docs.lovable.dev, checked September 2026.
Decide before you build
Six things to settle in writing first. Each one is a promise to somebody who is about to arrange their day around your team, and each costs far less to decide now than to unpick once real meetings are in the calendar.
Whose hours a time comes from
Decide whether availability belongs to the business or to each person. One set of opening hours is simpler, and wrong the moment a host works different days. Weekly hours per person, each in that person’s own time zone, cost a little more to build and are the only version that survives a second office.
How round robin chooses
Fewest recent bookings first, a fixed order of priority, or both? Write the rule in one sentence before anything is built, because hosts will ask why the last three meetings went to somebody else. Whatever you choose, record who got each booking, so the answer is a query rather than an argument.
What happens when Google does not answer
Your page asks each host’s calendar before offering a time. When that call fails, you either stop offering times or offer ones Google could not confirm. Offering them keeps the page working and risks an occasional clash. Stopping is safer and looks broken. Choose deliberately, and log the failures either way.
How much notice, and how many a day
Minimum notice stops a booking landing ten minutes from now. A daily limit stops a host doing eight calls on one Tuesday. A gap before and after keeps them from running late. Set all three per meeting type, since a quick intro call and a two-hour workshop want very different ones.
Whose clock the invitation is in
Store every meeting as one absolute moment, draw it in the viewer’s zone, and let the visitor correct the zone the page guessed. Then test the awkward cases on purpose: a client six hours away, a host in another country, and the week one of them changes the clocks and the other does not.
What a guest can change without an account
Guests will want to move or cancel. Give them a link that does both, and decide how late is too late. That link stands in for a password, so it should be long, random and stored only as a hash, and a reschedule should update the original invitation instead of sending a second one.
Comparing your build options
Handling real availability across a team is worth more than every screen in this app, and where you start decides how much of your build time it eats. Three routes to the same product: by hand, on a UI kit whose calendar knows nothing about anybody’s hours, or through AI prompts end to end.
The screens are the quick part. The slow part is the question behind every time on the page: is this person free, given their hours in their own time zone, the gap you want after their last call, the notice you asked for, what their Google Calendar says, and whoever else is pressing the same button this second. Round robin asks it once per host, and a collective meeting asks it of everyone at once.
A starter kit gives you a month grid, a form and a dashboard shell, which looks like most of a scheduler and is the part you would have finished anyway. Nothing in it knows whose hours apply, which host is next in the rotation, or that the 3pm on screen went to somebody else a minute ago. All of that is still yours to write.
A browser tab and one message at a time. The tables, the slot engine behind them, the booking write and every screen above get designed in a single conversation, with a live preview you book through before asking for the next thing.
Estimate your exact build timeframe
Not every team needs all six features. Untick what yours can do without, like charging for a session or syncing with Google Calendar, to see your real build time.
Your estimate
110 hrs
start to finish
Based on the 6 of 6 features you’ve selected, plus ~21h of groundwork. Toggle any on the left to watch the number move, and open the groundwork row to untick what you have already, such as a database that is already running or going live if you are only building a mock-up for now.
A rough estimate, not a quote. Real time depends on how much you customize and how clean your data is.
Let’s set up the tools you need
Nothing gets installed, because the whole workspace is a browser tab. Three things to sort out before step 01, and a fourth worth adding once the project matters to you. After that, you build by describing what you want.
Lovable account
Nothing to download. Sign up with an email, Google, or GitHub account and you land straight in the chat where you describe what to build.
Sign up for LovableLovable subscription
Lovable bills by build credits, so the plan you need follows what you build. Free gives you 5 credits a day, capped at 30 a month, which is enough to try it rather than to finish an app. Pro is $25/month for 100 credits ($250/year, about $21/month), and that is the bottom rung: a build spread over several sessions usually lands on 200 credits at $50/month, or higher.
Compare Lovable plansSupabase project
Where your app keeps its data. Connect your own Supabase project from the chat, or let Lovable create one for you. Either way it designs the tables, adds the logins, and wires the screens to them from there.
Connect Supabase to LovableGitHub connection
Not needed to build anything, since Lovable keeps its own history of every change. Link a GitHub account and it also keeps a private repository in sync, so a copy of the real code exists outside the browser tab. Worth doing before the project is one you would hate to lose.
Set up GitHub syncOnly the first three are needed to start, and none of it touches your computer. From here, you describe what you want and Lovable builds it in the browser.
Build your scheduler, prompt by prompt
Nothing installs. You describe a piece, Lovable builds it, you click through the preview, and you ask for the next one. The order below is shaped by one awkward fact: a live preview is a generous judge of this particular app, because you are the only person booking, every test host sits in your own time zone, and nobody else presses the button in the same second. Availability and the booking write get asked for in explicit terms and then tested against that generosity.
- 01
Attach the database before you ask for a single screen
Any booking screen designed over data that does not exist yet gets rebuilt the day it does. Connect the database first, and put the two rules this build rests on into the conversation while it is still short enough for them to hold.
PromptSet up the projectConnect my Supabase project before building any screens at all. Then set up a team meeting scheduler, and hold two rules for the rest of this project. First: whether a time is free is always worked out on the server from each host’s own rules and existing bookings, and worked out again at the moment a booking is saved, never taken from what the page was showing. Second: every moment is stored in UTC, each host’s weekly hours are kept in that host’s own time zone, and the page only converts them for display. Use these words consistently: member, host, weekly hours, date off, meeting type, one-on-one, group, round robin, collective, slot, booking, manage link. Confirm the connection is live, then tell me which of those two rules changes how you will design the weekly hours table, before you design it.
That closing question earns its extra exchange. It is the cheapest way to find out now whether Lovable has in mind hours stored per person in their own zone, or one grid for the whole business, and only one of those two survives your first host in another country.
- 02
Describe your team and your meeting types, and watch the page appear
The part Lovable is fastest at, and the part where looking at it beats specifying it. Get your meeting types in front of your own eyes before a single booking exists.
PromptModel the team and build the booking pageDesign the tables and build the public side over them. Members: name, email, title, a colour, a role of admin or host, their own time zone, a round robin priority, and whether they are in the rotation. Weekly hours per member per weekday as one or more ranges in their zone, and dates off per member. Meeting types: name, URL slug, description, length, a kind of one-on-one, group, round robin or collective, seats for a group, a round robin rule of balance or priority, a location with a detail field, minutes of gap before and after, minimum notice, the interval between start times, a daily limit, and the members who host it. Questions per meeting type. One workspace row for the business name, accent colour, logo and default zone. Add three hosts across two time zones as sample data, one meeting type of each kind, and one host who is off on Fridays. Then the public pages: a page listing the meeting types, and a page per type with a month calendar, placeholder start times for the chosen day, and a time-zone picker that guesses the visitor’s zone. No sign-in and no bookings in this message.
Click your own booking page in the preview before moving on, and use Select elements to fix what looks wrong rather than describing it. How a meeting type’s length, location and host sit together on its card is most of whether somebody picks it, and it is far quicker to point at than to word.
- 03
Ask for availability on the server, in those words
A preview will not show you that availability is wrong, because every host you invented is in your own time zone and you know what is booked. Ask for the calculation explicitly and then test it with a day you have deliberately filled.
PromptWork out availability properlyBuild availability as a server-side function rather than logic in the screen, and treat this as the most important message in the project. Given a meeting type and a range of at most 45 days, return only genuinely free start times. For each host and date: take that weekday’s hours in the host’s own zone and turn them into UTC moments for that date, drop dates off, cut the hours into starts at the meeting type’s interval, then remove any start inside the minimum notice, any whose meeting plus the gaps before and after overlaps one of that host’s confirmed bookings, and every start on a day where the host has reached the daily limit. Then combine by kind: one-on-one and group use their one host, round robin offers a start if any host in the rotation has it, collective only if every host has it, and a group start already booked stays on offer until its seats are full. Afterwards, show me two things by running them: the working for one Wednesday for the round robin type, listing each host’s starts and which rule removed each missing one, and the same week as a visitor in Tokyo would see it.
Bookmark the version you are on before you send this. Availability is the message most likely to take two or three goes, and coming back to a version you know worked beats untangling a half-changed schema. Remember that restoring code in Lovable does not roll back your database, so a bookmark is worth more here than anywhere else in the build.
- 04
The booking, the manage link, and the email that confirms it
The first messages that write anything. A booking has to be refused when the time went a second ago, and a client with no account has to be able to move it.
PromptTake the booking in one protected writeBuild the booking as one database function called by an edge function, never as separate saves from the page. It takes the meeting type, the start, and the guest’s name, email, time zone and answers. Inside one transaction: a lock per host involved, the start worked out again with the rules from the last message, the round robin host picked (balance means fewest confirmed bookings from seven days ago to thirty days ahead with priority breaking ties, priority means the highest-priority host who is free), seats and the daily limit checked, then the booking and a row per host saved. Add a database constraint so one host can never have two confirmed bookings that overlap. Create a manage link from 32 random bytes, keep only its SHA-256 hash, and build a manage page where the guest can cancel with a reason or pick a new time, keeping the same calendar invitation id with its sequence increased. Send a confirmation, a reschedule notice and a cancellation through Resend with an .ics attached, and skip the email with a log line when no key is set. Reject any submission that fills a hidden honeypot field. Then show me two bookings for the same host and time sent at the same moment, and one of them refused.
Add the Resend key as an edge function secret when Lovable asks for it, never pasted into the chat. Then book yourself a meeting and open the email on your phone: the .ics has to land in your own calendar at the right hour before you trust it with a client’s.
- 05
Logins, two roles, and a booking page that reads no tables
Your team signs in, and clients never do. The rules have to hold both of those, and keep the visitor who opens the network tab away from the tables themselves.
PromptAdd auth, roles, and access rulesAdd sign-in for my team with email and password and a password reset, linking each account to its member row by email, ignoring case. The first account on an empty project becomes the admin, under a lock so two sign-ups at once cannot both become admin, and any later sign-up whose email is not a member gets no access. Keep the role on the member row, with a trigger that refuses changes to role, active, email, priority or the rotation flag unless an admin is asking, and one that refuses to remove the last admin. Then row-level security on every table with no policy for anonymous visitors at all: the booking page keeps reading through the edge functions from the last two messages. A host reads the bookings they are on and edits their own hours and dates off. An admin reaches everything. The branding bucket is public to read, admin-only to write, and refuses SVG. Then show me, signed in as a host, that another host’s booking comes back empty, that an anonymous request to the bookings table returns nothing, and that a host cannot make themselves admin.
Check the anonymous case from a private browser window rather than from the preview, where you are signed in. The shortcut to refuse here is a policy that opens the meeting types and hours to public reads so the page can query them directly: the page already gets what it needs through the edge functions, and that policy would hand anybody your team’s whole schedule.
- 06Destination
Google Calendar, the back office, and a week worked through the preview
The calendar your hosts already use, the screens your team works from, and the snippet that puts the page on your own site. Then a week of meetings booked by people who are not you.
PromptConnect Google, add the back office, and rehearseFinish the app. Google Calendar first: a connection per host asking only for calendar.events and calendar.freebusy, a signed state on the callback, the refresh token stored in Supabase Vault and read only by edge functions, and busy times from free/busy removed from the available starts (when Google errors, offer the times and log it). Write each booking as an event on the first connected host’s calendar with the guest and any other hosts invited, a Meet link when the location is Google Meet, and delete it on cancellation. Then the back office: bookings by week, month and list with a host cancel, the meeting type editor with details, limits, questions and hosts, each host’s hours and dates off, the team with invites and round robin settings, analytics over 7, 30 or 90 days, branding, and a share page that writes the embed snippet as inline, a popup button or a popup text link, with the iframe resizing itself. Then walk me through a week: book each kind of meeting as a stranger, book the round robin type five times and show me who got them, cancel and reschedule from the email link, and add a busy event in Google to watch the time disappear.
Your Google client ID and secret go in as edge function secrets, and the redirect address in Google Cloud has to match the published URL exactly, not the preview one. Connect a real calendar and put a real event in it before you believe the page, since a connection that saved its token but never reads busy time looks fine until a client books over a dentist appointment.
Protect the team calendar and your clients
A booking says who is meeting whom, when, and often why, in the answers to your questions. What follows are the database rules and server-side checks that keep each record with the people it belongs to.
Standard Password Protection
Sign-up, sign-in, sessions and password resets belong to the auth service that ships with your database. Only your team signs in, since clients book without an account. One detail matters on day one: the template makes the first account on a fresh project the admin, so create yours before the address goes anywhere. A later sign-up whose email is not on the team gets no access at all.
Separate Admin and Host Access
Two roles cover a team. An admin manages the meeting types, the team, the branding and every booking. A host manages their own hours and calendar and sees the bookings they are on. The case worth thinking about is the visitor with no account, who in this template has no table access at all: the public page reads what it needs through server functions that return only what a booking page should show.
Automatic Double-Booking Protection
If the page posts “this time is free” along with the booking, the way to take a time that is not free is to change what the page posts. The server works the times out again at the moment of the write and takes a lock per host, and the database itself refuses two confirmed meetings that overlap for the same person, so a race is lost at the constraint rather than discovered on the day.
Data Rules Protected from Tampering
A list of bookings narrowed in a component is one forgotten condition away from showing a stranger who your team is meeting and what they wrote in the form. Row-level security asks that question inside the database instead, as the rows are handed over. The reason to move it there is what happens on the day somebody forgets: the query comes back empty rather than with the whole calendar.
Strict Privacy for Guest Details
The template’s migrations declare 36 row-level security policies, which is a modest number for a reason: anonymous visitors are given none, so every policy decides which member of your team sees what. Take the bookings table. An admin sees every booking, a host sees the ones they are on, and a guest reaches theirs only through a server function that returns that one booking and nothing beside it.
Private & Secure Booking Links
Letting a guest move or cancel without an account means something in the link stands in for a password. The template generates 32 random bytes for each booking, sends them in the confirmation, and stores only their SHA-256 hash, so a copy of the database is not a copy of anybody’s link. A booking number in a URL would be a page anybody could walk through by changing a digit.
Bot & Brute-Force Protection
The public booking form is the one endpoint a stranger can call as often as they like. The template rejects any submission that fills in a hidden field real visitors never see, which stops the laziest bots, and that is the whole of its protection: there is no rate limit on it. If your page gets real attention, ask your AI coding tool to add one keyed by address and kept somewhere shared, not in one function’s memory.
Prevent Unauthorized Admin Escalation
A role stored on a record its owner can edit is a role anybody can give themselves. The template keeps each person’s role on the team table and has a trigger refuse any change to it, or to their round robin settings, unless an admin is asking, and a second trigger refuses to remove the last admin. That matters here because an admin reads every client’s name, email and answers.
Privileged Actions Run Server-Side
Working out free times, writing a booking, handing it to a round robin host, taking a payment, connecting a calendar and sending the invitation or a reminder each need to do more than the person who set them off may do directly. The template gives this work 14 server functions, each checking who is asking inside its own code, and the key they run with stays on the server, never in the app a visitor downloads.
Calendar Tokens Kept in a Vault
Connecting Google Calendar hands your app a refresh token that can read and write that host’s calendar until somebody revokes it. The template stores it encrypted in Supabase Vault, reachable only by the server functions through one narrow database function, and never returns it to the browser. Disconnecting revokes the token at Google as well as deleting your copy.
Guest Answers Treated as Personal Data
Booking questions invite people to write things down: why they want the call, a phone number, a company name. Decide who on the team may read them, how long you keep last year’s bookings, and what you do when somebody asks for theirs to be deleted, and remember that Google Calendar keeps its own copy of every event you write there.
Automatic Daily Data Backups
No backup is taken of your meeting types, your team or a single booking on the free tier. Daily backups, kept for a week, start on Supabase Pro at $25/mo. Worth having before the calendar is the only record of next month, because the invitations sitting in your clients’ inboxes will not rebuild your database for you.
Review the access rules (row-level security policies) on every table. For each one, tell me in simple terms who can view, add, edit, and delete records, confirm that people can only reach their own data while the right roles can reach more, and flag anything left open that shouldn’t be.
Paste this into the chat before launch so Lovable checks nobody can see data they shouldn’t.
One rule outranks the rest here: the database service key, your Google client secret, the secret that signs a calendar connection, and any AI provider key live on the server and nowhere else: not in the app a visitor downloads, and not in a public repository. Treat any of them that escapes as burned, and replace it the same day.
What speeds the build, and what slows it
Speeds the build
- One small request per message, such as a field, a screen or a rule, rather than the whole app at once
- Connecting your database before building screens that need real data, not after
- Using Select elements to point at the exact thing that should change, instead of describing its location in words
- Bookmarking a known-good version before a redesign or a change to the data model
- Reading each response before sending the next request, so small mistakes don’t stack up
Slows the build
- Asking for an entire app in one message instead of one screen at a time
- Building screens for data your database does not hold yet
- Describing which button or section to change instead of selecting it
- Skipping bookmarks, then scrolling far back through history to undo a bad change
- Approving several messages in a row without previewing what actually changed
Connecting GitHub (Optional)
Every change in Lovable is saved automatically without any technical setup. You only need to link GitHub if you want a private copy under your own control or plan to hand the codebase over to external developers.
What Git actually is
A recorder for a project: every change becomes a version you can go back to, and nothing is ever overwritten. GitHub is the service that keeps those versions online.
Lovable already saves every change
A new version is created each time Lovable changes your project. No save button, no Git command, and the full history is there to scroll back through.
Version history, Lovable docsReverting undoes the code, not your data
One click restores an earlier version of your code and redeploys it, but nothing already written to your database rolls back with it. A UI or logic change is safe to undo. A change that touched real records is not.
Bookmark before a big change
Before a redesign or a change to your data model, bookmark the version you are on: one click back instead of a long scroll through history.
Connecting it, if you want to
Open your project settings, pick GitHub, and authorise the account. Lovable creates a private repository and keeps it in sync both ways: changes in Lovable reach GitHub, and anything pushed to that branch comes back in. Free on every plan.
GitHub integration, Lovable docsIt’s also how you leave, if you ever want to
The synced repository is a standard Vite and React project: clone it, hand it to a developer, or deploy it yourself.
Deployment, hosting, and ownership, Lovable docsWhere to host your application
Hosting gives your app a home on the internet so anyone can open it via a web link. Choose a service below to make your site live. (Your database, logins, and business records are stored separately in Supabase, covered below).
| Host | Best for | Notes | Free tier |
|---|---|---|---|
| LovableBuilt in | Publishing from the chat | The project you have been previewing publishes itself, with nothing to configure and no account to open anywhere else. Free on any plan at a lovable.app address. Paid plans put it on your own domain: buy one through Lovable and the DNS is done for you, or point one you already own at it using the two records the setup screen shows. Certificate issued automatically either way. | Free on a lovable.app subdomain · own domain on paid plans |
One button, and the app you have been previewing is live.
Hosting it somewhere else
Only for a setup Lovable does not offer: a host you already pay for, or the exported code on your own account. None of it is needed to go live.
| Host | Best for | Notes | Free tier |
|---|---|---|---|
| Vercel | One-click deploys | Point it at the repository once and each push publishes itself, with nothing for a Vite project to configure. Read the plan terms before a business domain goes near it: Hobby is licensed for personal, non-commercial use, and a booking page for a team that sells its time is commercial however small the team is, so Pro, at $20/user/mo. | Pro from $20/user/mo (Hobby is non-commercial) |
| Netlify | Drag-and-drop or Git | Connect the repository or drop the built folder onto the page, and you are live inside a minute. Add the one redirect rule it asks for: without it, a link straight to one meeting type, or the link in a client’s confirmation email, returns a not-found page. | Free tier |
| Cloudflare Pages | Clients in other countries | Copies of the site sit close to whoever is loading it rather than in one place. Worth choosing if your clients book from abroad, which is also the situation that makes testing your time-zone handling properly unavoidable. | Generous free tier |
| GitHub Pages | Not really this app | Publishes free out of your GitHub project once you change a routing setting. Here mainly to be ruled out: publishing free means the repository is public, and this code sits beside a database of who your team is meeting and what they wrote in the form. | Free from a public repo only |
| Firebase Hosting | Teams already on Google | Configure it once and each release is a single command afterwards. The argument for it is that your calendars, your mail and the Google Cloud project behind the calendar connection are already Google ones. | Free Spark tier |
| AWS Amplify Hosting | Teams already on AWS | Publishes out of the AWS console, and takes the same one rewrite rule so a link to a single meeting type resolves. Pick it when AWS is already on the invoice and adding another supplier is the part you want to avoid. | Free tier (build + hosting) |
| Surge | Publish from the terminal | A single command sends the built folder online, with no repository involved anywhere. Useful for showing a colleague how the booking page feels before you commit to it. Not for the link that goes in your email signature. | Free - unlimited publishing |
| DigitalOcean App Platform | DigitalOcean users | Builds and serves out of the account that already runs whatever else you have. One supplier and one invoice is the entire argument, and for a small team that is a real one. | Free - 3 static sites, 1 GB/mo transfer |
Any of them serves the app perfectly well, so judge them on three questions instead of on speed. Whether the plan allows commercial use, since Vercel’s Hobby tier does not. Whether it publishes from a private repository, because this code sits beside your clients’ details. And whether a deep link resolves in a browser that has never seen your site: a link to one meeting type and the manage link in a confirmation email both have to land on the right page rather than the home page.
Calendar connections that stop working after a week are Google’s Testing mode, not a bug. While your Google Cloud consent screen is set to Testing, only the accounts you list can connect, and Google expires their refresh tokens after 7 days, so every host has to reconnect weekly and the page quietly stops checking their calendar in between. Publishing the app removes that, and because the template asks to read and edit calendar events, Google asks for verification first. Start that before launch week, not during it.
Keep your data in Supabase
The team, the meeting types, each host’s hours, the bookings and your logo. This is also where the logic that has to outrank the person asking lives, and where each host’s calendar token is kept encrypted.
| Service | Best for | Notes | Free tier |
|---|---|---|---|
| Supabase | Data, auth, functions, files, secrets | The team and the bookings sit in Postgres, accounts come from its auth service, your logo and cover image go into its storage, and its edge functions carry the work that has to be permitted more than the visitor setting it off: working out free times, writing the booking, talking to Google and sending the email. Getting there is opening a free project and giving the app two values, its URL and its publishable key. The calendar tokens go into its Vault, encrypted, where only those functions can reach them. | Free tier, then usage-based |
Where AI genuinely helps a team that takes meetings
Each of these is one more prompt once the scheduler is running, and each can be pasted in as written. They all reach the model through one server-side function, the only place your API key is kept.
Turn “any afternoon next week” into three real times
Plenty of meetings still start as an email that says roughly when somebody is free. Reading it, checking the team’s calendars and replying with options is the small daily tax this removes, and it never books anything without you.
Add a server-side ai function (one place, with my provider key only on it) and a screen where I paste a message from a client. Send the message to that function and get back a structured guess: which of my meeting types they seem to want, the window they are describing, and their time zone if the message gives one away. Then run that window through the real availability for that meeting type and show me the three closest free times as a draft reply I can copy, with a booking link for each. Never create a booking from the model’s output. Where the message is vague, say so rather than choosing for me: if it says “sometime next week”, I want to see that, not a Tuesday you picked.
A short brief before every meeting, from the answers in the form
Your booking questions already collect why somebody wants the call. A host reading three lines before it starts walks in prepared, and the model only ever sees what the client chose to write.
Add a “prepare” action on a booking that sends the meeting type, the scheduled time and the answers to my booking questions to my ai function, and returns a three-line brief for the host: what the client wants, what to have ready, and one question worth asking. Send no email address, no phone number and no name. Show the brief on the booking in the dashboard only, never write it to Google Calendar or into an email, and say plainly when the answers are too thin to brief from rather than padding them out.
Draft the reply when a client asks for a time you do not offer
A request for a Saturday, a time outside anybody’s hours, a third reschedule in a week. The words are the work here, and keeping them consistent across the team is worth more than writing them fast.
Add a “draft a reply” action that takes a client’s message and the meeting type it is about, and returns a short, polite reply I can edit before it goes anywhere. It may only offer times that the availability function actually returns, it must say when nothing fits rather than inventing an exception, and it never promises that a host will make time outside their hours, because that is a decision for the host and not for the model.
Find the pattern in a month of cancellations
The cancellation rate on the dashboard tells you how many. What you want to know is why: the same reason three times, always for the same meeting type, always booked more than a fortnight ahead.
Add a panel on the analytics page that groups the last period’s cancellation reasons by what they are actually about, using my ai function, and returns each theme with a count, one representative quote, and which meeting type and how far ahead the booking was made. Send the reason text only, with no names or email addresses. State counts as figures, print the period it covered beside the result, and where a theme rests on one or two cancellations, say so instead of presenting it as a trend.
Ask your own calendar whether round robin is fair
Round robin is supposed to share the work. Whether it does, once somebody has been off for a week and somebody else joined halfway through the month, is a question worth asking the data rather than the team.
Add a panel that answers questions about my own booking history through my ai function: bookings per host per week, how round robin meetings were shared out, cancellation rates by meeting type and by host, and which hours of the week fill first. Have it compute every figure with queries and use the model only to explain what they suggest, so no number is invented. Every answer states the period and the sample size, and where a pattern is thin it says the pattern is thin. Send no client names or contact details at all.
You bring no key and pick no provider: Lovable manages an API key per project, and if you do not name a model it chooses one from what you describe. Match the model to the job: fast and cheap for anything that runs on every record, stronger only where the reasoning matters. Send every feature above through that one integration.
Get a head start with our template
Every route above begins at an empty folder, which is not the only place a scheduler can begin. This one exists, runs, and takes bookings, so the weeks that the slot engine, the booking write and the calendar connection would have cost turn into an afternoon of adding your team and your hours.
Meeting Scheduler like Calendly
The exact scheduler this guide builds, packaged so you can open it, point it at your own backend, and make it yours from there. A scheduling app for teams that meet clients. People choose a time on your booking page or on your own website, answer your questions, pay by card when the session has a price, and get a calendar invitation by email and a reminder before the meeting. Round robin hands each booking to whoever is free, a collective meeting only offers times when every host can make it, and group sessions stay open until the seats run out.
The key benefits of starting with a template
The times on the page already come from each host’s own hours and calendar, and the database already refuses to give two people the same host at once. That is most of what this saves you. Behind it, the four meeting kinds, the manage link, the emails, the dashboard and the embed are done too.
Building the core from scratch
~110 hrs
Opening the template, already built
~1 hr
~109 hrs of building you skip
Two different measurements, on purpose. Building the application is the ~110 hrs, and that figure covers the six rows above, while the template also ships reminder workflows, a routing form and a contacts list that the calculator does not count. The ~1 hr is what adopting the built one costs: connect a database of your own, load the sample team or your own, and set your hours. Setting up a Google Cloud project for the calendar connection sits outside both figures.
Availability that already handles four kinds of meeting
A server-side slot engine works out free times from each host’s weekly hours in their own time zone, dates off, gaps before and after, minimum notice, the start-time interval and a daily limit, then combines hosts for round robin and collective meetings and counts seats for group sessions. It is shared code with unit tests of its own, so the rule you are most likely to change is the one with the best cover.
A booking write the database itself protects
Every booking is a single database call that takes a lock per host, works the times out again, and inserts under an exclusion constraint refusing two meetings that overlap for the same person. A free booking is confirmed in that one write. A paid one holds the time for 15 minutes while the client pays, and the scheduled job that sends reminders also frees any hold that ran out.
Two roles across 36 declared policies
Admin and host, with the role guarded by a trigger so nobody can promote themselves, and 36 row-level security policies of which none admits an anonymous visitor. Around them, 14 server functions for the work that has to outrank the person asking: the public page, free times, booking, payment and the Stripe webhook, managing a booking, a host’s cancellation, the routing form, the workflow runner, the invitation file, the calendar connection and team invites.
Google Calendar and email, both directions
Hosts connect Google Calendar, busy time is checked before any time is offered, and each booking is written to the host’s calendar with the client and any other hosts invited and a Meet link when the meeting is on Google Meet. Clients get a confirmation, a reschedule notice or a cancellation by email through Resend, each with an .ics attached and a link to manage the booking, and workflows add reminders and follow-ups by email or by text through Twilio.
A back office and a page that travels
Meeting types with an editor for details, limits, questions and hosts, a bookings calendar by week, month or list, each host’s hours and dates off, the team and round robin settings, analytics over 7, 30 or 90 days, branding with your logo, colour and layout, and an embed for your own site inline, as a popup or behind a text link. A sample team loads in one click so there is something to look at on day one.
Common questions
Google Calendar, and only Google Calendar. Each host connects their own account, their busy time is checked before a time is offered, and new bookings are written back with the client invited. Outlook, Microsoft 365, iCloud and CalDAV calendars are not included. Adding Microsoft is a described change rather than a rebuild, but it brings its own sign-in, its own tokens and its own verification with Microsoft, so plan it as a project of its own.
Yes. Workflows send an email or a text at a time you choose: when a meeting is booked, a set time before it starts, a set time after it ends, on a no-show or on a cancellation, with the client’s name, the time and the manage link filled in. One scheduled job runs them every five minutes, and you switch it on with a short SQL snippet from the setup guide. Emails go through Resend and texts through Twilio. Without those keys the messages are logged instead of sent and bookings still work, which is useful while you build and a surprise if you forget it at launch.
Yes, through Stripe. Give a meeting type a price and the client pays by card on the booking page while the time is held for them for 15 minutes. A cancellation by the host is refunded in full, and so is one by the client made before the refund window you set (24 hours unless you change it). Payment covers the full price at booking only, so deposits, packages, coupons and invoices are additions. Without Stripe keys a paid meeting is still booked, with the payment due at the appointment.
Three things, in order. Free times are worked out on the server from each host’s rules and their existing meetings, so a taken time is never offered. The booking is written by one database call that takes a lock per host and works the times out again inside it, so a time that went while somebody was typing is refused. And the database carries a constraint refusing two confirmed meetings that overlap for the same host. The check worth asking your AI tool to demonstrate is the race: two bookings for the same time at the same moment, and one of them refused.
By one of two rules you choose per meeting type. Balance gives it to whoever has the fewest confirmed bookings from seven days ago to thirty days ahead, and uses priority to break a tie. Priority gives it to the highest-priority host who is free. Either way the page offers a time if any host in the rotation is free then, and a host can be taken out of the rotation without being removed from the team. The booking records who got it, so a question about fairness is a query.
A collective meeting needs every host on it, so the page offers only the times they all share, and every one of them is attached to the booking. A group session has one host and a number of seats: the same start time stays on offer until the seats are taken, and while it is running that host cannot be booked for anything else that overlaps it. Both are settings on the meeting type rather than separate features.
Every meeting is stored as one absolute moment. Each host’s weekly hours are kept in that host’s own zone, and the booking page guesses the visitor’s zone and lets them change it. That is the right shape, and it still needs testing: book a meeting with your computer set to another zone and check the time in the invitation, and do it again in the weeks when Europe and the US change their clocks on different dates.
Yes. One script tag gives you three ways to show it: inline in the page, as a popup opened by a floating button, or as a popup behind any text link you choose. The embedded page resizes itself to fit, so it does not sit in a scrolling box inside your site. The share page in the dashboard writes the snippet for each meeting type, so there is nothing to assemble by hand.
Only for the calendar connection, and yes, it has to be your own. You create a Google Cloud project, an OAuth client and a consent screen, and give the server functions the client’s ID and secret. While the consent screen is in Testing, only listed accounts can connect and their tokens expire after seven days, and publishing it means going through Google’s verification, because the app reads and edits calendar events. Everything else in the scheduler works without it.
No, and this is the half an AI coding tool handles best. Describe the behaviour you want in ordinary language and back come the tables, the accounts, the rules deciding which host sees which booking, the function turning each host’s hours into free times, the booking write the database protects, and the calendar connection. Your share of it is opening a free Supabase project for all of that to be written into.
Somewhere to keep the data and somewhere to serve the app, and each has a free tier. Once clients are booking for real, the upgrade worth making is Supabase Pro, from $25/mo, less for the storage than for the pause, since a free project sleeps after a quiet week. Email works on Resend’s free tier for most small teams, and the Google calendar connection costs nothing. Nothing on the bill moves when a host joins the team.
Nothing here is proprietary. Your team, meeting types, hours and bookings sit in plain PostgreSQL tables that any Postgres host will accept from a standard dump, and your logo and cover are files you can copy like any others. That is worth more than it sounds in this category: the history of who met whom is the record of your client relationships, and it is exactly what makes a scheduling platform awkward to leave.
Yes, and it is worth doing before the link goes anywhere. Every host listed above attaches a domain in a few clicks with HTTPS included. Do it before the booking link goes into your email signature, your proposals and your website, because it also becomes the address in every confirmation email and the address your Google consent screen is verified against.
No. Everything happens in a browser tab: you describe what you want in the chat, and Lovable writes and previews the code. The setup section above covers the handful of things you connect first: an account, a plan, and your own Supabase project.
A sketch on the Free plan is fine for testing an idea, with no real backend behind it. A project connected to your own Supabase account is the one you can actually launch, with real logins, real data, and your own domain.
Build credits reset every day (Free) or on your billing cycle (paid plans). If you run out mid-session, the app you’ve built stays exactly as it is. You either wait for the reset or move up a credit tier to keep going right away.
References
Sources checked September 2026- 01Breaking down the infinite workday, meetings across time zones (Microsoft WorkLab, June 2025). microsoft.com (published June 2025)
- 02The State of Meetings 2024, hours spent scheduling (Calendly, commissioned survey). calendly.com (survey fielded June to July 2024)
- 03Pricing (per-seat tiers, round robin on Teams), Calendly. calendly.com
- 04Pricing (Teams and Organizations per user, yearly), Cal.com. cal.com
- 05Pricing (Basic and Premium per user, both billing bases), SavvyCal. savvycal.com
- 06Pricing (annual plans, included seats), Chili Piper. chilipiper.com
- 07Pricing (Pro plan, free-tier limits, project pausing), Supabase. supabase.com
- 08Web developer hourly rates 2026 (freelance and agency benchmarks). developex.com
- 09Using OAuth 2.0 to access Google APIs (refresh token expiry in Testing), Google. developers.google.com
- 10Calendar API scopes and app verification, Google. developers.google.com
- 11Row Level Security, Supabase docs. supabase.com
- 12Vault (encrypted secrets in Postgres), Supabase docs. supabase.com
- 13Sign up, Lovable. lovable.dev
- 14Subscription plans (Free, Pro, Business), Lovable docs. docs.lovable.dev
- 15Connect Supabase, Lovable docs. docs.lovable.dev
- 16GitHub integration, Lovable docs. docs.lovable.dev
- 17Deployment, hosting, and ownership, Lovable docs. docs.lovable.dev
- 18Version history and reverting, Lovable docs. docs.lovable.dev
- 19Preview toolbar (Select elements), Lovable docs. docs.lovable.dev
- 20AI features and model selection, Lovable docs. docs.lovable.dev
- 21Custom domains, Lovable docs. docs.lovable.dev
This guide is general information, not legal advice. What you may keep about a client, how long you may keep a record of who met whom, and what you must tell people before you write their details into somebody’s calendar vary by country and by state, so check your own rules before you collect anything. Third-party prices, plan terms, and market rates are quoted from the sources above and were last checked on the date shown. Vendors change them without notice, so confirm before you budget. Build hours and the cost estimates derived from them are our own estimates, not quotes. Lovable is a product of Lovable Labs. Verify current capabilities and pricing before relying on them.