Privacy Policy

We collect several categories of information to deliver and improve the Service. The types of information we collect depend on how you interact with Calen360.

We use the information we collect for the following purposes:

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, Perizer processes your personal data under the following legal bases:

• Contract performance: Processing necessary to provide the Service you have subscribed to (e.g., creating your account, processing bookings)
• Legitimate interests: Processing for security monitoring, fraud prevention, service improvement, and direct marketing to existing customers, where your rights and interests do not override ours
• Legal obligation: Processing required to comply with applicable law, including tax and financial regulations
• Consent: Processing for non-essential cookies, marketing communications to non-customers, or any processing where we have requested your explicit consent — you may withdraw consent at any time without affecting prior processing

We do not sell, rent, or trade your personal information to third parties for their independent marketing purposes. We may share your information in the following limited circumstances:

The Calen360 integrations with Google, Microsoft, Zoom, and other providers involve bidirectional data flows. The following summarizes how data moves:

• Google Calendar / Outlook: We read your existing calendar events to check availability and prevent conflicts. We write new events to your calendar when a booking is confirmed. We do not read the full content of existing events — only titles, times, attendees, and free/busy status.
• Zoom / Google Meet / Microsoft Teams: We generate or retrieve meeting room links on your behalf and embed them in booking confirmations. We do not record, access, or process the content of your video meetings.
• OAuth tokens: Access and refresh tokens are stored encrypted at rest using AES-256. Tokens are scoped to the minimum permissions required and are never shared with other users.

Each connected Third-Party Service is governed by its own privacy policy, which you should review independently. Links to relevant policies: Google · Microsoft · Zoom.

We retain personal information for as long as your account is active or as needed to provide the Service. Specific retention periods:

• Account data: Retained for the duration of your account and deleted within 90 days of account closure
• Booking records: Retained for 2 years following the booking date for operational and dispute-resolution purposes
• Payment records: Retained for 7 years to comply with financial and tax regulations
• Security and audit logs: Retained for 12 months
• Marketing communications preferences: Retained until you unsubscribe or request deletion
• De-identified analytics data: May be retained indefinitely as it does not contain personal information

Where we are required by applicable law to retain data for longer periods (e.g., tax records), we will do so. You may request earlier deletion of your personal data as described in Section 7.

Depending on your jurisdiction, you may have some or all of the following rights regarding your personal data:

Calen360 uses cookies and similar technologies to operate the Service and understand how you use it. Below is a summary of cookie categories we use:

You can control non-essential cookies through your browser settings. Disabling certain cookies may affect Service functionality. We do not use cookies to serve third-party advertisements. We do not participate in cross-site behavioral advertising networks.

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

• Encryption in transit: All data is transmitted over HTTPS using TLS 1.2 or higher
• Encryption at rest: Sensitive fields (OAuth tokens, payment metadata) are encrypted using AES-256
• Password security: User passwords are hashed using bcrypt with a per-account salt — we never store plaintext passwords
• Access controls: Internal access to production data is restricted to authorized personnel on a need-to-know basis, with full audit logging
• Vulnerability management: We conduct regular security reviews and dependency audits, and operate a responsible disclosure program
• Incident response: We maintain a documented incident response plan and will notify affected users and regulators within 72 hours of a qualifying breach, where required by law

Perizer is based in the United States. If you are accessing the Service from the EEA, UK, or another jurisdiction with data transfer restrictions, please be aware that your personal data may be transferred to, stored in, and processed in the United States or other countries where our service providers operate.

Where required by applicable law, we rely on lawful transfer mechanisms including the EU-U.S. Data Privacy Framework, Standard Contractual Clauses (SCCs) approved by the European Commission, and UK International Data Transfer Agreements (IDTAs). A copy of applicable SCCs is available upon request at [email protected].

Calen360 is not directed at children under the age of 16. We do not knowingly collect, use, or disclose personal information from individuals under 16 years of age. If we become aware that we have inadvertently collected personal data from a child under 16, we will promptly delete it. If you believe we may have collected information from a child, please contact us at [email protected].

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes, we will:

• Update the 'Last Updated' date at the top of this page
• Notify registered users via email for material changes at least 30 days before they take effect
• Display a prominent in-app banner for significant policy changes

Your continued use of the Service after the effective date of any revised policy constitutes your acceptance of the changes. If you do not agree with the changes, you should stop using the Service and may request deletion of your account and data.

If you have any questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact our Privacy Team:

We will acknowledge receipt of your inquiry within 5 business days and endeavor to resolve it within 30 days. EEA/UK residents who are not satisfied with our response have the right to lodge a complaint with their local data protection supervisory authority.