Privacy Policy

1. Introduction

CalSolo ("we", "our", or "us") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you use our calendar aggregation service.

We are registered in England and Wales and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data We Collect

We collect and process the following categories of personal data:

• Account information: Your name, email address, and timezone preference when you register.
• Calendar data: Event titles, times, locations, and attendee information from your connected calendar accounts (Google, Microsoft, Apple).
• Authentication tokens: Encrypted OAuth tokens and app-specific passwords used to sync your calendars.
• Usage data: Anonymised information about how you interact with CalSolo, such as which views you use and sync frequency.

3. How We Use Your Data

• To provide and maintain the CalSolo service, including calendar synchronisation and conflict detection.
• To authenticate you securely via your chosen calendar provider.
• To send essential service communications (e.g., security alerts, sync failures).
• To improve and develop new features based on aggregated, anonymised usage patterns.

4. Data Security

We take the security of your data seriously. All calendar tokens and credentials are encrypted at rest using AES-256 encryption. Data in transit is protected via TLS 1.3. We never store your calendar provider passwords directly — we use OAuth 2.0 token-based authentication for Google and Microsoft, and encrypted app-specific passwords for Apple Calendar.

5. Data Sharing

We do not sell, trade, or rent your personal data to third parties. We do not share your calendar data with any external parties. Your schedule is private, full stop.

We may use the following categories of service providers who process data on our behalf:

• Cloud infrastructure providers (for hosting and data storage)
• Authentication service providers
• Error monitoring services (anonymised data only)

6. Data Retention

We retain your calendar data only for as long as your account is active. When you disconnect a calendar account, we delete all associated event data within 48 hours. When you delete your CalSolo account, all personal data is permanently removed within 30 days.

7. Your Rights

Under UK GDPR, you have the following rights:

• Right of access: Request a copy of all personal data we hold about you.
• Right to rectification: Request correction of inaccurate personal data.
• Right to erasure: Request deletion of your personal data.
• Right to data portability: Request an export of your data in a machine-readable format.
• Right to restrict processing: Request that we limit how we use your data.
• Right to object: Object to our processing of your personal data.

To exercise any of these rights, please contact us at privacy@calsolo.com.

8. Cookies

CalSolo uses only essential cookies required for authentication and session management. We do not use tracking cookies, advertising cookies, or any third-party analytics cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through an in-app notification at least 14 days before the changes take effect.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: privacy@calsolo.com
CalSolo Ltd
London, United Kingdom