1. Introduction
This Privacy Policy explains how CalendarTap (“we,” “us,” or “our”) collects, uses, shares, and protects personal information when you use calendartap.com and related services (the “Service”). By using the Service, you acknowledge this Policy. If you do not agree, please do not use the Service.
For questions, contact help@calendartap.com.
2. Who this Policy covers
- Account holders — people who register and manage events in the dashboard.
- Guests / visitors — people who view event pages, click Add to Calendar links, submit RSVPs, use help chat, or browse public pages.
- Website visitors — people who visit marketing or support pages without an account.
If you are an account holder collecting guest RSVP or event data, you are responsible for providing any notices and obtaining any consents required for your own events and audience.
3. Information we collect
3.1 Information you provide
- Account data: name, email address, password (stored hashed), and profile settings.
- Event content: titles, descriptions, dates/times, timezones, locations, meeting links, images, branding, RSVP messages, and related configuration.
- RSVP and attendance data: when you enable RSVPs, guest responses and related attendance records you manage.
- Support and help chat: name, email, and message content when you contact support or use help chat.
- Billing-related details: plan choices and billing history references. Payment card details are processed by Paddle; we do not store full card numbers.
- Feedback: survey or campaign responses you choose to submit.
3.2 Information collected automatically
- Usage and device data: pages viewed, approximate timestamps, browser type, device/OS, referrer, and similar technical metadata.
- IP address: for security, abuse prevention, and basic analytics.
- Click analytics: when someone uses an Add to Calendar button or related link, we may record that a click occurred, which calendar provider was chosen, and basic technical metadata (such as browser and referrer) for aggregate analytics. We do not receive personal data from the guest’s calendar account itself; once their calendar app opens, that add happens outside CalendarTap.
- Event page views: aggregate or event-level view metrics where enabled.
- Cookies and similar technologies: session and authentication cookies needed to keep you signed in and operate the Service; preference cookies where applicable.
3.3 Information from third parties
- Calendar sync (optional): if you connect Google Calendar or Microsoft Outlook, we receive OAuth tokens and calendar metadata you authorise so we can sync events according to your settings. You can disconnect these integrations in your account.
- Payments: Paddle provides subscription status, customer identifiers, invoices, and related billing events via webhooks/APIs.
- Authentication / email providers: delivery status and related operational metadata from email or infrastructure providers we use to run the Service.
4. How we use information
We use personal information to:
- Provide, operate, secure, and improve the Service.
- Create and manage accounts, events, embeds, RSVPs, and analytics.
- Process subscriptions, plan changes, cancellations, and refunds via Paddle.
- Respond to support requests and operate help chat (including AI-assisted answers grounded in our FAQ and policy pages, and human follow-up when needed).
- Send transactional email (password resets, billing notices, important service updates).
- Send product or marketing communications only where permitted and in line with your communication preferences.
- Detect fraud, abuse, and security incidents; enforce our Terms.
- Comply with legal obligations and protect our rights.
We do not sell your personal information to third parties.
5. How we share information
We may share information with:
- Service providers that help us host, store, email, analyse, authenticate, or process payments (including Paddle as merchant of record), under contractual obligations to protect the data.
- Calendar and platform providers when you or your guests interact with Add to Calendar links or when you authorise calendar sync.
- The public when you publish event landing pages, embeds, or shareable links — event details you choose to make public are visible to anyone with the URL.
- Event organisers — RSVP and attendance data submitted on an organiser’s event is available to that account holder for managing their event.
- Legal and safety — when required by law, or to protect CalendarTap, our users, or the public from harm or fraud.
- Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality.
6. Roles for guest data
For RSVP and similar guest submissions on your events, CalendarTap processes that data to provide the Service to you. You decide what to collect from guests and how you use it for your events. Do not use the Service to collect sensitive personal data unless you have a lawful basis and clear notice to guests.
7. Cookies
We use essential cookies for authentication and security. We may use additional cookies or local storage for preferences and analytics. You can control cookies through your browser settings; disabling essential cookies may prevent sign-in or other features from working.
8. Data retention
We retain account and event data while your account is active and as needed to provide the Service. After account deletion, we delete or anonymise personal data associated with your account within a reasonable period, except where we must retain information for legal, tax, security, or dispute-resolution purposes (for example billing records). Aggregate analytics that no longer identify a person may be retained.
9. Security
We implement technical and organisational measures designed to protect personal information, including encrypted transport (HTTPS), hashed passwords, and access controls. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
10. International transfers
We may process and store information in countries other than where you live, including where our hosting and service providers operate. Where required, we use appropriate safeguards for cross-border transfers.
11. Your rights and choices
Depending on your location, you may have rights to:
- Access, correct, or update personal information.
- Delete your account and associated personal data (available in account settings, or contact us).
- Object to or restrict certain processing.
- Withdraw consent where processing is consent-based.
- Opt out of non-essential marketing emails via preference links or settings.
- Disconnect calendar OAuth integrations.
To exercise rights, email help@calendartap.com from the address on your account. We may need to verify your identity before responding.
12. Children’s privacy
The Service is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided personal information, contact us and we will take appropriate steps to delete it.
13. Third-party links and services
The Service may link to third-party sites or open third-party calendar apps. Their privacy practices are governed by their own policies. We encourage you to review them.
14. Changes to this Policy
We may update this Privacy Policy from time to time. The “Last updated” date will change when we do. Material changes will be reflected on this page; where appropriate we may also notify account holders by email or in-product notice.
15. Contact
Privacy questions or requests: help@calendartap.com or Contact Support.
Related policies: Terms of Service and Refunds Policy.