Privacy Policy

1. Overview

Calendar FreeSync ("we", "us", or "our") is a calendar synchronization service that connects your Google Calendar and Microsoft Outlook accounts. This Privacy Policy explains what information we collect, how we use it, and how you can control it.

2. Information We Collect

• Account information: Your email address and name when you sign up.
• Connected account email addresses: The email addresses of the Google and Microsoft accounts you connect to the service.
• OAuth tokens: Access and refresh tokens granted when you authorize Calendar FreeSync to access your Google Calendar or Microsoft Outlook. These tokens allow us to read and write events on your behalf.
• Calendar event data: Event titles, dates, and times from your source calendar, solely for the purpose of replicating them to your target calendar. We do not store event content beyond what is necessary to perform the sync.
• Usage data: Sync activity logs (e.g., which events were synced and when) to help us operate and debug the service.

3. How We Use Your Information

• To authenticate you and maintain your account.
• To connect to your Google Calendar and Microsoft Outlook accounts and perform calendar synchronization on your behalf.
• To send transactional emails (e.g., email verification, password resets).
• To operate, maintain, and improve the service.

We do not sell your personal information. We do not use your calendar data for advertising or share it with third parties except as necessary to operate the service (e.g., Google's Calendar API, Microsoft's Graph API).

4. Third-Party API Usage

Calendar FreeSync uses the Google Calendar API and Microsoft Graph API to read events from your source calendar and create events in your target calendar. Our use of your data is limited to what is necessary to provide the sync functionality you configure.

Calendar FreeSync's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Our use of Microsoft APIs complies with the Microsoft API Terms of Use.

5. Revoking Access

You can revoke Calendar FreeSync's access to your connected accounts at any time:

• Within the app: Go to your dashboard, click the ... menu on a sync, and select Revoke Access. This will immediately remove the OAuth tokens from our database.
• Via Google: Visit Google Account Permissions and remove Calendar FreeSync from the list of connected apps.
• Via Microsoft: Visit Microsoft Account Permissions and remove Calendar FreeSync from the list of connected apps.

6. Data Retention

We retain your account data and OAuth tokens for as long as your account is active. When you revoke access or delete a sync, the associated OAuth tokens are removed from our database immediately. You can delete your account at any time by contacting us.

7. Data Security

Your OAuth tokens and account data are stored in Supabase, a secure cloud database with row-level security enabled. We use HTTPS for all data in transit. We follow industry best practices to ensure your data remains secure.

8. Third-Party Services

We use the following third-party services to operate Calendar FreeSync:

• Google Calendar API — Google calendar access and sync
• Microsoft Graph API — Outlook calendar access and sync
• Supabase — database and authentication
• Vercel — hosting and deployment
• Resend — transactional email delivery
• Stripe — payment processing (paid plans)

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice within the app. Continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions about this Privacy Policy or how we handle your data, please contact us at support@calendarfreesync.com.