Privacy Policy

This Privacy Policy explains how Calenyo collects, uses, discloses, and protects personal information when you visit our websites, create an account, publish a booking page, schedule or manage an appointment, connect an integration, contact us, or otherwise use our scheduling software, applications, APIs, emails, and related services (collectively, the “Service”).

Calenyo is operated by Calenyo, with a mailing address at --. “Calenyo,” “we,” “us,” and “our” refer to that entity. This Policy should be read with our Terms and Conditions.

This Policy does not govern third-party websites or services that have their own privacy practices. If an organizer uses Calenyo to offer services, the organizer may provide an additional privacy notice governing how that organizer uses invitee information.

For account, website, billing, security, support, product analytics, and direct relationship information, Calenyo generally determines why and how the information is processed and acts as a controller or “business” under applicable privacy law.

When an organizer configures booking questions and uses Calenyo to collect or manage invitee information, the organizer generally determines the purpose of that processing. In that context, the organizer may be the controller or business and Calenyo may act as its processor or service provider. We may still process limited information independently to secure, maintain, and comply with law for the Service.

Depending on how you use the Service, we may collect:

We collect information directly from users and invitees, automatically from devices and browsers, from organizers who invite or book someone, and from third parties that a user chooses to connect. Please do not submit highly sensitive information—such as passwords, payment-card numbers, government identifiers, detailed medical records, or information about children—unless Calenyo expressly supports and requests it.

Google sign-in provides identity information, such as a verified email address and basic profile details, so that you can create or access a Calenyo account. Connecting Google Calendar is a separate, optional authorization.

When you connect Google Calendar, Calenyo requests permission to read calendar availability and events needed to prevent scheduling conflicts and to create, update, or delete Calenyo booking events in a calendar you control. Calenyo may process event identifiers, titles, start and end times, all-day status, free/busy ranges, calendar identifiers, OAuth scopes, token expiry information, and connection status. Calendar data is retrieved as needed to provide the integration. We store encrypted OAuth access and refresh tokens and identifiers needed to keep Calenyo bookings synchronized.

Calenyo uses Google user data only to provide or improve the user-facing Google sign-in and Calendar integration, to maintain security, to provide user-authorized support, and to comply with law. We do not sell Google user data, use it for advertising, use it to determine creditworthiness, or permit humans to read it except with the user’s affirmative permission for support, when necessary for security, when required by law, or when it has been aggregated so that it does not identify an individual.

Calenyo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

You can disconnect Google Calendar from the Calendar page. Disconnecting removes the stored Calendar connection from Calenyo and stops future API access through that connection. You can also revoke Calenyo directly from your Google Account permissions. Account deletion removes the stored Google OAuth credentials associated with the Calenyo account.

We use personal information to:

Our websites and applications may use cookies, local storage, Google Tag Manager, internal analytics, error monitoring, and session-replay or diagnostic tools such as Sentry and OpenReplay when configured. These tools may collect page interactions, device and network information, errors, and diagnostic context. Session replay is used to diagnose failures and improve usability, not to serve targeted advertising. Browser settings may allow you to limit cookies or local storage, but essential authentication and security features may then stop working.

AI-assisted outputs may be inaccurate and are provided as suggestions. Calenyo does not use AI features to make decisions that produce legal or similarly significant effects about individuals.

Where a law such as the GDPR or UK GDPR requires a legal basis, we rely on one or more of the following:

When Calenyo acts as a processor or service provider for an organizer, the organizer is responsible for identifying its legal basis and giving required notices to invitees.

We disclose personal information only as reasonably necessary for the purposes described above:

Calenyo does not sell Google user data. Calenyo does not sell personal information or share it for cross-context behavioral advertising as those terms are defined by applicable US state privacy laws.

We retain information for the shortest period reasonably necessary to provide the Service, maintain security and continuity, resolve disputes, enforce agreements, and meet legal, tax, accounting, and compliance obligations. Retention depends on the type of information, the account’s status, user instructions, the sensitivity of the information, and applicable law.

Account holders can permanently delete their account and associated Calenyo-owned data from account settings. Invitees who want information deleted should contact the organizer first; they may also contact Calenyo if they need assistance identifying the relevant organizer or exercising a right that applies to Calenyo.

We use administrative, technical, and organizational safeguards designed to protect information, including access controls, authentication, transport security, encrypted storage of Google OAuth tokens, scoped authorization, logging, and procedures for responding to suspected incidents. Access by personnel and service providers is limited according to role and need.

No internet service is completely secure. You are responsible for protecting credentials, API keys, management links, and devices and for promptly notifying us through support if you suspect unauthorized access.

Depending on where you live and subject to legal exceptions, you may have the right to request access, confirmation, correction, deletion, restriction, objection, portability, or a copy of personal information; withdraw consent; opt out of certain communications; and appeal a denied privacy request. You may also have the right to complain to a local data-protection authority. We do not discriminate against people for exercising applicable privacy rights.

You can update profile information, disconnect Google Calendar, revoke Google access, unsubscribe from eligible emails, and delete your Calenyo account through available product controls. You may also submit a request through our contact page. We may need to verify identity and authority before completing a request. Authorized agents may submit requests where permitted by law, subject to verification.

If an organizer controls invitee information, we may direct the request to that organizer or assist it in responding. We may deny or limit requests where permitted by law, including when necessary to protect another person, preserve security, or comply with a legal obligation.

Calenyo and its service providers may process information in Türkiye, the United States, and other countries where we or they operate. Those countries may have different data-protection rules. Where required, we use recognized transfer mechanisms and supplementary safeguards designed to provide appropriate protection.

The Service is not directed to children under 18 or the age of legal majority where they live. We do not knowingly collect personal information directly from children for their own Calenyo accounts. If you believe a child has provided information contrary to this Policy, contact us so we can investigate and take appropriate action.

We may update this Policy to reflect changes to the Service, law, or our practices. We will post the updated version and change the “Last updated” date. If a change materially affects privacy rights, we will provide additional notice where reasonably practicable or required by law.

Questions, privacy requests, and complaints can be sent through Calenyo support. Please include enough information for us to understand and verify the request. You may also write to Calenyo, --.