Privacy Policy

Who we are

calpls.com ("calpls", "we", "us") is a service for creating subscription calendars that update themselves. This policy explains what personal data we collect, why, and what rights you have.

Data controller: [COMPANY NAME], [ADDRESS], Hungary. Contact: hello@calpls.com.

What we collect

• Account data — your email address, an encrypted (hashed) password, your name if you provide it, and your chosen plan.
• Content you create — calendar names, topic prompts, events you add or edit, and .ics files you import.
• Subscriber data — when someone subscribes to a calendar, we store the email address they provide (required for paid subscriptions, optional for free ones) and a unique feed token.
• Feed access logs — each time a calendar feed is fetched we log the IP address, approximate location (country, region, city), user agent, and timestamp. Creators see this only in aggregated form (counts, charts, top countries).
• Payment data — payments are processed by Stripe. We never see or store your card details; we store only Stripe identifiers (customer, subscription, and payout-account IDs).

Why we use it

• To provide the service: build, refresh, and serve your calendars (performance of contract).
• To bill you and pay out creators (performance of contract, legal obligations).
• To show creators aggregated statistics about their subscribers (legitimate interest).
• To secure the service and prevent abuse (legitimate interest).
• To contact you about your account or important changes (performance of contract).

AI processing

For AI-refreshed calendars, your topic prompt and location settings are sent to OpenAI (via Cloudflare's AI Gateway) to search the web for matching events. Prompts are not linked to your identity in those requests. Event data returned by AI may be inaccurate — creators can mark events as verified.

Who we share data with

• Cloudflare — hosting, storage, and content delivery.
• OpenAI — event search for AI calendars (topic prompts only).
• Stripe — payment processing and creator payouts.

We do not sell personal data. Some providers process data outside the EEA; where they do, transfers rely on adequacy decisions or standard contractual clauses.

Cookies

We use one essential cookie: your session, which keeps you signed in. It is not used for tracking. If we introduce analytics cookies, we will update this policy and ask for consent where required.

Retention

Account and content data is kept while your account exists and deleted or anonymized within 90 days of account deletion. Feed access logs are kept for up to 12 months. Billing records are kept as long as tax law requires.

Your rights

Under the GDPR you can request access to, correction of, or deletion of your personal data, ask for a portable copy, object to processing based on legitimate interest, and withdraw consent at any time. Write to hello@calpls.com and we'll respond within 30 days. You can also lodge a complaint with your local supervisory authority (in Hungary: NAIH).

Changes

We may update this policy as the service evolves. Material changes will be announced by email or in the app before they take effect.