Privacy Policy

Last revised: 2026-02-24

This Privacy Policy is publicly available at https://buildcalendar.com/privacy and accessible from within our app.

TL;DR;#

On sign-up, we collect only your ID, email and name, from third parties (e.g., "Continue with Google").
Data is used for service provision, communication, and security.
When end users connect their Google Calendar, we access calendar and event data using Google Calendar API scopes. This data is used solely to provide the BuildCalendar service and is not used for advertising or any unrelated purpose. See Section 4 for full details.
We do not sell your personal information or knowingly use any ad networks or other third-party services that may sell your data. Ever.
We implement security measures to protect your data.
We don't use cookies unless you create an account. If you sign up, cookies are used only for things like keeping you logged in.
You may optionally enable email notifications; they are only sent with your explicit opt-in consent.
Significant policy updates will be communicated.
Contact: hello(at)buildcalendar.com

1. Introduction#

This Privacy Policy explains how BuildCalendar ("we", "us", "our") collects, uses, and protects your personal information when you use our website (https://buildcalendar.com) ("Services"). By using our Services, you agree to the terms of this policy.

2. Information We Collect#

2.1 Information You Provide#

We collect information you provide directly to us, such as when you create an account or use our Services. This may include your name, email address, and payment information. When you use a third-party identity provider (such as Google, Facebook or Apple ID) to sign in, we collect your name and email address.

2.2 Information We Collect Automatically#

When you use our Services, we automatically collect certain information, including:

Log data (e.g. browser type, pages visited, IP address)
Device information
Usage data collected through cookies and similar technologies, as described in Section 5.

3. How We Use Your Information#

We use your information for the following purposes:

To provide, operate, and improve our Services
To communicate with you regarding your account or service-related matters
To ensure security and prevent fraud
To comply with legal obligations

The legal bases for processing your data include:

Performance of a contract
Your consent
Our legitimate interests in operating and securing our Services
Compliance with legal obligations

4. Google Calendar User Data#

BuildCalendar provides a calendar integration platform that allows our customers (software teams) to connect their end users' Google Calendar accounts. When an end user authorizes the Google Calendar connection, we request access to Google user data through the following OAuth 2.0 scopes:

openid — Used to obtain Google's unique user identifier so we can associate the connection with the correct user account.
https://www.googleapis.com/auth/calendar — Grants full read and write access to the user's Google Calendar data, including the calendar list and all events.
https://www.googleapis.com/auth/calendar.events — Grants read and write access to events on the user's calendars.

4.1 What Data We Access#

When a Google Calendar connection is authorized, we access the following data from Google Calendar:

Calendar list: Calendar names, descriptions, time zones, colors, and access roles.
Calendar events: Event titles, descriptions, start and end times, time zones, recurrence rules, locations, and status.
User info: Google user ID and email address (to identify the connected account).

4.2 How We Use Google User Data#

We use Google Calendar data solely for the following purposes:

Syncing calendars and events into BuildCalendar so that our customers can display and manage calendar data within their own applications.
Creating, updating, and deleting events on behalf of end users, as directed by our customers' applications through the BuildCalendar API.
Identifying the connected Google account so end users can see which account is linked and manage their connection.

We do not use Google user data for advertising, for training AI/ML models, or for any purpose unrelated to providing and improving the BuildCalendar calendar integration service.

4.3 How We Store Google User Data#

OAuth tokens (access tokens and refresh tokens) are encrypted at rest and stored securely in our database. We retain these tokens only for as long as the connection remains active.
Calendar and event data synced from Google is stored in our database and associated with the relevant customer team and end user.
All data is protected by the security measures described in Section 10 of this policy.

Google Calendar data is made available to the BuildCalendar customer (the software team) whose end user authorized the connection, through the BuildCalendar API. This is the core purpose of the service.
We do not sell, rent, or share Google user data with any third parties for advertising, analytics, or any other purpose.
We do not allow humans to read Google user data unless (a) we have the user's affirmative consent, (b) it is necessary for security purposes (e.g. investigating abuse), (c) it is necessary to comply with applicable law, or (d) our use is limited to internal operations and the data have been aggregated and anonymized.

4.5 Revoking Access#

End users can revoke BuildCalendar's access to their Google Calendar data at any time by:

Disconnecting their Google account through the customer's application (which calls the BuildCalendar API to delete the connection), or
Revoking access directly from their Google Account permissions page.

When a connection is deleted, we delete the stored OAuth tokens and associated calendar data.

4.6 Google API Services User Data Policy#

Our use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Cookies and Tracking Technologies#

Our landing page (https://buildcalendar.com) does not use any cookies or tracking technologies. The app itself uses cookies, local storage, and IndexedDB for the following essential purposes:

Cookies: We use cookies to manage your user session. This is a secure and essential function that allows you to remain logged in as you navigate the app.
Local Storage: This is used to save small user settings and preferences directly on your device, so they are remembered between sessions.
IndexedDB: This technology is used for performance caching. It stores data directly on your device to reduce bandwidth usage and load times, making the app faster and more efficient for you.

You can manage your cookie preferences through your browser settings, but please note that disabling them may impact the functionality of the app.

6. Data Retention#

We retain your personal information for the duration of your account.

You have the ability to access, review, and delete your data directly by contacting us at hello(at)buildcalendar.com. We will process your request within 30 days and will permanently delete all of your data, except that some billing information may be retained as required by law (e.g., tax or regulatory reasons).

7. International Data Transfers#

Your information may be transferred to and processed in countries other than your own within the EU. We ensure appropriate safeguards are in place to protect your information in compliance with applicable laws, including the GDPR.

8. Your Rights#

You have the following rights regarding your personal information. To exercise any of these rights, please contact us at hello(at)buildcalendar.com. We will respond to your request within one month.

Right to access: You have the right to request and receive a copy of your personal data that we hold about you.
Right to rectification: You have the right to have inaccurate or incomplete data corrected.
Right to erasure: You have the right to have your data deleted, also known as the "right to be forgotten," in certain circumstances.
Right to restrict processing: You have the right to limit how we use your data.
Right to object to processing: You have the right to object to the processing of your data, for example, for direct marketing purposes.
Rights related to automated decision-making and profiling: You have the right not to be subject to a decision based solely on automated processing. Please note that we do not use automated decision-making, targeted advertising or profiling with your personal data.

When you contact us to exercise your rights, please provide us with your name, email address, and specific details about the data you wish to access, correct, or delete. This helps us verify your identity and process your request efficiently.

9. Children's Privacy#

Our Services are intended for a general audience and are not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected personal data from someone under 18, we will delete it immediately. If you believe we have collected information from a minor without appropriate consent, please contact us immediately.

10. Security#

We implement appropriate technical and organizational measures to protect your personal information, including:

Encryption of data in transit and at rest
Regular security audits and penetration testing
Strict access controls and authentication procedures

However, no method of transmission over the Internet or method of electronic storage is 100% secure.

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by law.

We do not sell your personal information, ever. We do not knowingly use any ad networks or other third-party services that may sell your data. We may share your information in the following circumstances:

To comply with legal obligations, such as in response to a court order or subpoena.
With service providers who help us operate our business, as listed in Section 12.
In the event of a business transfer or merger.

Any third parties we share data with are obligated to protect your information to the same standard as outlined in this policy.

12. Third-Party Services#

We use the following third-party services to help operate and improve our Services. These services may collect and process your data according to their own privacy policies. We encourage you to review these policies.

If you choose to sign in using Google, we use Google Sign-In to authenticate your account. Your name, email, and a unique ID are provided by Google. This information is used only for account creation and management.
Google Calendar integration: BuildCalendar connects to Google Calendar on behalf of end users to sync calendars and events. The specific data we access, how we use it, how we store it, and how we share it is described in detail in Section 4 ("Google Calendar User Data") of this policy. For more details, see Google's Privacy Policy. Our use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Deno Deploy: For hosting our application. See Deno Deploy Privacy Policy.
Supabase: For user authentication and data storage (name, email, user account data). See Supabase Privacy Policy.
Stripe: For secure payment management (receives purchase and billing information). See Stripe Privacy Policy.

We do not use any advertising services or ad networks. No data is shared for advertising or sold.

13. Data Portability#

You can request an export of your data in a machine-readable format by contacting us at hello(at)buildcalendar.com. We will process your request within 30 days.

14. Changes to This Policy#

We may update this Policy from time to time. We will notify you of any significant changes by posting a prominent notice on our websites or by sending you an email.

15. Contact Us#

If you have any questions about this Policy or our data practices, please contact us at:

[email protected]