Privacy Policy

1. Controller

Sync Calendars is operated by Suisse IT GmbH, Kesslernmattstrasse 20, CH-8965 Berikon, Switzerland. Contact: info@suisse-it.ch.

2. Data We Process

We process account data such as your name, email address, password hash, subscription status, trial status, and selected sync settings. When you connect Google Calendar or Microsoft Outlook, we store encrypted OAuth tokens, connected account metadata, calendar IDs, calendar names, and sync rules you configure.

To run sync routes, we process calendar event data required for the selected rule: event times, titles, descriptions, locations, attendees, conference links, privacy status, availability status, update timestamps, and copied-event IDs. You control whether copied events contain busy-only blockers, titles, selected details, or full details.

3. Google Calendar Data and Requested Scopes

When you connect a Google account, Sync Calendars requests only the Google Calendar permissions required to provide the calendar sync service:

• https://www.googleapis.com/auth/calendar.calendarlist.readonly to show the calendars available in your Google account so you can choose source and destination calendars.
• https://www.googleapis.com/auth/calendar.events to read events from source calendars and create, update, or delete copied events in destination calendars according to the sync rules you configure.

Google Calendar data is used only to provide calendar connection, calendar listing, event reading, event copying, event updating, event deletion, and sync-rule functionality selected by you. We do not use Google Calendar data for advertising, profiling, or selling data.

Sync Calendars' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Limited Use Commitments

We do not sell Google user data. We do not use Google Calendar data to serve ads, retarget users, create advertising profiles, determine creditworthiness, or train generalized artificial intelligence or machine learning models.

Human access to Google Calendar data is limited to what is necessary for support, security, abuse prevention, legal compliance, or when you explicitly ask us to investigate a specific issue. Support access is limited to the data needed for the request.

5. Sharing and Processors

We do not sell Google, Microsoft, or calendar data. Data is shared only where necessary to operate the service, for example with hosting infrastructure, payment processing through Stripe, and the calendar providers you connect so that requested sync actions can be performed.

Stripe receives billing and checkout data, not your Google Calendar event contents. Google and Microsoft receive API requests only as required to perform the calendar actions you authorize.

6. Security

We use HTTPS in transit, encrypted storage for OAuth tokens, access controls, and operational safeguards to protect account and calendar data. No calendar account passwords are collected or stored.

OAuth access tokens and refresh tokens are encrypted before storage. Calendar account passwords are never requested by Sync Calendars. Users authorize access directly through Google or Microsoft OAuth consent screens.

7. Retention, Revocation, and Deletion

We retain account, connection, token, calendar, sync-rule, and copied-event metadata while your account or connection is active. You can disconnect calendars or request account deletion by contacting us. After deletion, we remove data unless retention is required for legal, accounting, security, or dispute-resolution purposes.

You can revoke Google access at any time from your Google Account permissions page and you can disconnect a connected calendar account inside Sync Calendars. You can also request deletion at info@suisse-it.ch. See our Data Deletion Instructions for the available deletion paths.

8. Cookies and Measurement

We may use necessary cookies for authentication and service operation. Public marketing pages may use Google Ads conversion measurement to understand advertising performance. OAuth calendar data is not used for advertising measurement.

9. Your Rights

Depending on your location, you may have rights to access, correct, delete, export, or restrict the processing of your personal data. Contact us at info@suisse-it.chfor privacy requests.

10. Google API Disclosure

A concise Google API disclosure is also available at /google-api-disclosure. It summarizes how Sync Calendars uses and transfers information received from Google APIs.

11. Changes

We may update this policy when the service, legal requirements, or data practices change. The latest version is always available on this page.