Privacy Policy

1. Introduction

Caledoria ("we," "our," or "us") is a calendar aggregation and scheduling service operated at caledoria.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

By using Caledoria, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Display name (optional)
• Password (stored as a salted hash — we never store plaintext passwords)

2.2 Connected Calendar Data

When you connect Google or Microsoft accounts, we access:

• Calendar event titles, descriptions, times, locations, and attendees
• Contact names, emails, birthdays, and anniversaries (for contact sync features)

We store OAuth access tokens and refresh tokens in encrypted form to maintain your calendar connections. We do not store your Google or Microsoft passwords.

2.3 Booking Information

When someone books a meeting through your scheduling link, we collect:

• Booker's name, email address, and optional company name
• Phone number (if provided)
• Meeting notes (if provided)

2.4 Integration Data

If you connect third-party integrations, we may store:

• Zoom: OAuth tokens to create meetings on your behalf
• Slack: Workspace tokens and channel information for notifications
• WhatsApp: Phone numbers for sending booking reminders via Twilio

3. How We Use Your Information

We use the information we collect to:

• Synchronize calendar events across your connected accounts
• Display a unified calendar view
• Check availability and prevent double-bookings
• Create and manage scheduled meetings
• Send booking confirmations, reminders, and notifications
• Create Zoom meetings for scheduled bookings
• Display holidays and contact birthdays on your calendar
• Improve and maintain the service

4. Data Sharing

We do not sell, rent, or trade your personal information. We share data only in these cases:

• Calendar providers: We send event data back to Google Calendar and Microsoft Outlook to maintain two-way synchronization.
• Zoom: We send meeting details to Zoom to create video conferences.
• Email delivery: We use Mailgun to send transactional emails (booking confirmations, password resets).
• SMS/WhatsApp: We use Twilio to send booking reminders if you opt in.
• Legal requirements: We may disclose information if required by law or to protect our rights.

5. Data Security

We implement appropriate security measures including:

• AES encryption of all OAuth tokens at rest
• HTTPS (TLS) encryption for all data in transit
• Salted password hashing (never stored in plaintext)
• JWT-based authentication with expiring tokens

6. Data Retention

We retain your account data and calendar events for as long as your account is active. If you disconnect a calendar account, we remove the associated event data. You may delete your account at any time from Settings → Security → Danger Zone which immediately and permanently removes all your data.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated data
• Disconnect any linked calendar account at any time
• Revoke OAuth permissions directly through your Google or Microsoft account settings
• Export your data upon request

8. Cookies

Caledoria uses browser local storage (not traditional cookies) to store your authentication token and theme preference. We do not use tracking cookies or third-party analytics cookies.

9. Third-Party Services

Our service integrates with the following third-party providers, each with their own privacy policies:

• Google (Calendar, Contacts)
• Microsoft (Outlook Calendar, Contacts)
• Zoom (Video Meetings)
• Slack (Workspace Notifications)
• Twilio (WhatsApp/SMS)
• Stripe (Payment Processing)
• Mailgun (Email Delivery)
• Microsoft Azure (Hosting & Infrastructure)

10. Children's Privacy

Caledoria is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Email: privacy@caledoria.com