Privacy Policy

Polityka prywatności po polsku

Calveil is designed to share availability without sharing the event behind it. This policy explains how Calveil accesses, uses, stores, shares, and deletes personal data, including data received through Google APIs.

Controller and contact

EO Solutions operates Calveil. The legal operator and data controller is Elias Oswald, a sole trader registered in Poland. “We” and “us” mean EO Solutions.

Privacy questions and data-rights requests can be sent to contact@calveil.com.

This policy covers visitors, account holders, people whose calendar data is processed through an authorized connection, and people who contact us. The public-booking section below describes a planned feature; public booking is not currently available.

Data Calveil accesses and stores

Calveil receives data directly from you, from your browser, and from Google when you authorize access. Depending on the features you use, this includes:

• correspondence and information you choose to send when requesting support or exercising your rights;
• your Google identity: Google subject identifier, verified email address, display name, and the scopes you granted;
• connected-calendar metadata: calendar identifiers, names, colors, time zones, ownership and access roles;
• the limited event fields needed to decide and mirror availability: event identifiers and versions, start and end times, recurrence, status, event type, transparency, your own attendance response, private properties used to recognize Calveil-managed events, and a title only as described below;
• your link configuration, title policy, filters, cleanup choice, synchronization state, encrypted provider tokens, managed-event mappings, and privacy-safe activity records; and
• technical request data processed to deliver and protect the service, such as an IP address, browser and request metadata, timestamps, rate-limit counters, and security or error classifications. Calveil uses keyed identifiers for application rate limits rather than storing the raw IP address in its application database.

How Google user data is used

Google profile data is used to sign you in. Calendar-list access is used to show calendars you own and can connect. Event access is used only to evaluate the rules you configure, create or update managed availability events, receive change notifications, reconcile state, and safely clean up those managed events.

Calveil does not sell Google user data, use it for advertising, credit decisions, or data-broker services, or use it to train generalized AI or machine-learning models. Human access to Google user data is limited to a specific support request you authorize, security or abuse investigation, legal compliance, or internal operations using only aggregated and anonymized data as permitted by applicable policy.

Calveil's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

What Calveil deliberately does not copy

Mirror events never include attendees, descriptions, locations, conference details, attachments, reminders, organizer details, or links back to the source. Raw Google response bodies are processed in memory and are not retained. While a bounded synchronization run is in progress, Calveil may temporarily retain one normalized source event, including its title, inside an encrypted continuation cursor. That cursor is removed when the run completes, is abandoned, reaches terminal failure, or the account is deleted.

Event titles

Fixed private text is the default. If you explicitly choose a template containing {title}, the source title is used only for the destination you selected and may be temporarily encrypted for a queued write or an in-progress synchronization continuation. Anyone who can view that destination calendar may then see the copied title.

Purposes and legal bases

• Providing Calveil: identity, calendar, event, configuration, synchronization, support, and account-lifecycle data relating to you are processed to perform our service contract with you or take steps you request before entering it (GDPR Article 6(1)(b)).
• Security and reliable operation: limited request, activity, integrity, abuse-prevention, diagnostics, and legal-claim data are processed for the legitimate interests of securing, maintaining, and defending Calveil (GDPR Article 6(1)(f)).
• Legal obligations: data is processed where needed to comply with applicable law (GDPR Article 6(1)(c)).

Where an organization is our customer, processing its representatives’ contact details is based on our legitimate interest in administering that relationship. Where we act as controller for limited information about other people in a connected calendar, our basis is the legitimate interest in providing the requested availability service, subject to their rights and our data-minimization safeguards. An account holder’s contract is not a contract with those other people. We do not treat accepting this policy or granting Google API permissions as blanket GDPR consent. Any optional use requiring consent will have its own choice; you may withdraw that consent at any time without affecting earlier lawful processing.

Profile and Google authorization data are optional in the sense that you do not have to use Calveil, but the requested identity and calendar permissions are necessary to provide the features that rely on them.

Public booking links — planned feature

When public booking becomes available, a host will be able to publish a scheduling page so that visitors can request meetings without connecting their own Google calendar. Before collection starts, the booking page will identify the host, link to the applicable privacy notices, distinguish required and optional fields, and explain the booking-record retention period. This section does not enable public sharing of an existing Calveil calendar connection.

• Public information: a published page is intended for anyone with its link and may be forwarded, copied, or indexed by search engines. Only the host’s selected public profile, meeting types, and available slots are intended for publication. Source-event titles, participants, and other visitors’ booking details must not be exposed through the availability page.
• Visitor information: booking may require your name, email address, selected time and time zone, and meeting type. Any optional answers will be identified before submission. Do not include sensitive health information, identity documents, passwords, or confidential calendar contents in booking answers.
• Use and recipients: booking details will be used to arrange, confirm, reschedule, or cancel the requested meeting, prevent abuse, and send related service messages. Details you submit will reach the host and any disclosed co-hosts, and may appear in their connected calendar and meeting invitation. People with access to that calendar or a forwarded invitation may see them. A booking is not consent to marketing.
• Control: hosts choose which availability and profile information to publish. Visitors should treat personal booking-management links as private and contact the host to change a meeting or request deletion of the host’s copies. Contact us for data held by EO Solutions, even if you have no Calveil account.

For meetings hosted by EO Solutions, we will act as controller and process booking details to take steps you request toward a contract, or, for other correspondence and professional meetings, for our legitimate interest in arranging that meeting. A business or professional host using Calveil for its own meetings will normally be the controller of its invitees’ booking data. EO Solutions will process that data on the host’s documented instructions under a data processing agreement, while remaining controller for its own account administration, security, and legal obligations. The host must provide its own purpose, legal basis, contact, and retention information. Private household use may be treated differently under GDPR. A host’s use of data outside Calveil is covered by that host’s notice, not by permission from this policy.

Security

OAuth tokens and cursor data are encrypted with AES-GCM. Session tokens are stored only as keyed hashes. Calveil uses tenant-scoped access checks, short-lived OAuth state, secure cookies, request validation, bounded queues, and privacy-safe logging. No internet service can guarantee absolute security, so suspected issues should be reported promptly to the contact above.

Recipients and international transfers

Data is disclosed only as needed to provide and protect Calveil: to Cloudflare for hosting, databases, queues, workflows, security, and delivery; to Google for identity, Calendar API operations, and the destination events you instruct Calveil to create; to professional advisers under confidentiality when necessary; and to authorities where disclosure is legally required. Calveil does not sell personal data.

The primary Calveil database is configured for an EU jurisdiction. Cloudflare and Google may nevertheless process data in other countries. Where GDPR requires it, transfers outside the EEA rely on an adequacy decision or other appropriate safeguards, such as approved contractual protections.

You can contact us for information about the transfer mechanism applicable to your data and a copy of relevant safeguards, with confidential commercial information redacted where necessary. Selecting an EU database does not mean all processing stays in the EU.

Retention and deletion

• Account identity, encrypted Google credentials, calendar metadata, active link configuration, and mappings remain while your account or the relevant connection is active.
• Login sessions expire after no more than 30 days and can be revoked earlier. OAuth request state is short-lived and single-use.
• Privacy-safe activity, mirror tombstones, dead-letter quarantine, and abandoned synchronization continuations are normally retained for 30 days and then removed by bounded cleanup cycles. Physical removal can take longer during a backlog. Transitional encrypted event-write payloads are cleared when work settles and otherwise expire within their bounded operation window.
• Account deletion immediately closes sessions and starts durable cleanup. Credentials, identities, calendar configuration, links, and mappings are deleted; the remaining account record is de-identified. A private deletion receipt is available for 30 days, and limited privacy-safe evidence ages out under the operational retention policy.

Support correspondence is kept while handling the request and any necessary follow-up. Where correspondence is needed for a legal claim, retention is limited to the relevant limitation period and any pending proceedings. Future booking records will follow the period disclosed before booking, based on managing the meeting and requested follow-up. A host’s separate calendar, mailbox, and legal records follow the host’s retention rules; deleting data from Calveil does not automatically erase those independent copies.

Limited data may be kept longer where required by law or necessary to establish, exercise, or defend legal claims. Residual copies in disaster-recovery systems age out under the hosting provider's normal recovery cycle and are not used to continue the deleted service. Events you choose to keep and detach remain in Google Calendar under your control and Google's terms.

Cookies

Calveil uses only technical cookies needed for sign-in, session security, CSRF protection, and binding an OAuth response to the browser that started it. It does not use advertising or cross-site tracking cookies.

If optional analytics, marketing cookies, or third-party embeds are introduced, we will explain them and obtain consent before loading them where required. Refusing optional tracking will not prevent use of the core scheduling service.

Your rights and choices

Depending on the circumstances, GDPR gives you rights to access, correct, delete, or restrict personal data; receive portable data; and object to processing based on legitimate interests. You can export Calveil metadata in Settings, pause or delete links, disconnect Google accounts, revoke sessions, and delete your account. See the data-deletion instructions. We may ask for information needed to verify your identity before acting on a request.

You do not need an account to exercise your rights. Requests are normally free and answered within one month. If a lawful extension is necessary because of complexity or the number of requests, we will explain it within that first month; the extension may be up to two further months. If we process data for a host, we will assist that host with your request. You can also complain to the supervisory authority in the EEA country where you live or work, or where an alleged infringement occurred.

You may complain to the President of the Polish Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych). Current guidance and complaint channels are available on the UODO website. Calveil does not make decisions producing legal or similarly significant effects through automated profiling.

Children

Calveil accounts are intended for adults. The service is not directed at children, and public booking will not be offered as a service for children. Contact us if you believe a child’s data has been submitted inappropriately so that we can assess and address it.

Changes to this policy

This page will be updated when Calveil's data practices change. If a change materially affects how Google user data is used, affected users will be notified and asked for any consent required before the new use begins.