Privacy Policy

Last updated: July 2026

Calendlight ("we", "us", "our") operates the website calendlight.com and provides appointment scheduling services. This policy explains how we collect, use, and protect your personal data.

1. Data we collect

We collect the following information:

• Account information: your name and email address when you create an account.
• Booking information: names, email addresses, phone numbers (when provided), and notes submitted by people who book appointments through your scheduling page.
• Calendar data: when you connect Google Calendar, we access your calendar availability (busy/free status) and create events for confirmed bookings. We do not read or store the content of your existing calendar events.
• Payment information: payments are processed by Stripe. We store your Stripe customer ID and subscription status but never your credit card details.
• Usage data: server logs may include IP addresses, browser type, and pages visited. We do not use analytics or tracking tools.

2. How we use your data

We use your data exclusively to provide the service:

• To authenticate you and manage your account.
• To display your booking page and process appointment requests.
• To sync with your Google Calendar and prevent double bookings.
• To send confirmation and reminder emails related to bookings.
• To process your subscription payments via Stripe.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Third-party services

We use the following third-party services to operate Calendlight:

• Google Calendar API: to read your availability and create events. Governed by Google's Privacy Policy.
• Stripe: to process payments. Governed by Stripe's Privacy Policy.
• OVH: our hosting provider, located in France/EU.

4. Data retention

We retain your account data for as long as your account is active. Booking data is retained for as long as needed to provide the service. If you delete your account, we will delete all associated data within 30 days, except where we are required by law to retain it.

5. Your rights (GDPR)

If you are located in the European Union, you have the right to:

• Access, correct, or delete your personal data.
• Export your data in a portable format.
• Object to or restrict processing of your data.
• Withdraw consent at any time (e.g., disconnect Google Calendar).

To exercise any of these rights, contact us at support@calendlight.com.

6. Cookies

We use a single session cookie to keep you logged in. We do not use advertising, analytics, or third-party tracking cookies.

7. Security

We protect your data using HTTPS encryption, secure password-less authentication (magic links), and industry-standard security practices. Google OAuth tokens are stored encrypted in our database.

8. Children

Calendlight is not intended for use by anyone under the age of 16. We do not knowingly collect data from children.

9. Changes

We may update this policy from time to time. We will notify you by email of any significant changes. Continued use of the service after changes constitutes acceptance.

10. Contact

For any questions about this policy, contact us at support@calendlight.com.