Privacy policy

Calendli is run by Narayana Global Ventures Private Limited, registered at Jiroul Nakta Tol, PO Jiroul, PS Khirhar, District Madhubani, Bihar 847230, India (“we”, “us”).

In this policy, a host is someone with a Calendli account who publishes booking pages. An invitee is someone who books time on a host's page. A visitor is anyone who opens our website.

We decide how host account data is used. For the details an invitee enters on a booking page, the host decides what to ask and what to do with the booking; we handle those details to run the booking for the host.

From hosts

• Account: your email address and name. If you sign in with Google or Microsoft, we receive your name, email address and profile picture link from them.
• Profile and settings: your display name, booking link, time zone, language, time format, first day of the week and email notification choices.
• Booking pages and availability: titles, descriptions, durations, locations (such as meeting links, a phone number or an address you enter), the questions you ask, your working hours, date overrides and time off.
• Contacts: a list of people who have booked you, built from their bookings.
• Security: one-time sign-in codes (they expire after 10 minutes), and for each signed-in session the IP address and browser details.

From invitees

• Your name and email address, and the email addresses of any guests you add.
• A phone number, when the host asks for one or you choose a phone call.
• Your answers to the host's questions.
• The time zone and language of your booking, and any reason you give for rescheduling or canceling.
• The booking itself: its time, location, status and history (booked, moved, canceled).

From every visitor

• Your IP address, used to limit how often booking and sign-in requests can be made from one network. These counters expire within 24 hours, and the ones for booking pages keep only a one-way hash of the address.
• Server logs of requests, with the IP address shortened to its network part and every query string removed.

We don't ask for payment details: payments are not available yet. When they are, this policy will say what changes first.

• To run the service: create your account, sign you in, publish your booking pages, take bookings and show them in your dashboard.
• To send service emails: sign-in codes, a welcome email, booking confirmations with a calendar invite, reminders to invitees 24 hours and 1 hour before a booking, approval requests to hosts, and notices when a booking is moved or canceled.
• To keep the service safe: rate limits, stopping spam and abuse, and investigating security problems.
• To meet legal obligations.

We don't sell personal data, and we don't use it for advertising.

For visitors in the EU, EEA or UK, our legal bases are: performing our contract with hosts (running the service), our legitimate interests (running bookings for hosts, security and preventing abuse) and legal obligations.

We only use what the service needs to work:

• Sign-in cookies, set when a host signs in, keep you signed in for up to 30 days.
• A dashboard cookie remembers whether the side menu is open (kept for 7 days).
• If you pick a light, dark or system theme in settings, the choice is saved in your browser's local storage.
• Some booking pages can have your browser remember your name, email and phone on your device, to fill them in the next time you book. You can clear them on the booking form.

There are no analytics, advertising or third-party tracking cookies, and our pages load no third-party scripts. Booking pages and the demo set no cookies for invitees.

• The host you book: they see your details, your answers and the booking in their dashboard and emails. Guests you add are listed on the booking and its calendar invite.
• Service providers who run parts of the service for us: hosting and database backups (E2E Networks, in India) and email delivery (MSG91). They may only use the data to provide their service to us.
• Google or Microsoft, only if you choose to sign in with them.
• Authorities, when the law requires it.

Some links open other services under their own policies: “Add to Google Calendar”, “Share on WhatsApp” and the meeting links hosts add.

Data is stored with E2E Networks, in India. Our providers may process it in other countries. Where the law requires it, we use safeguards such as standard contractual clauses for those transfers.

• Host accounts, booking pages and bookings: while the account is open. When you delete your account, they are deleted right away; copies in backups go when those backups expire (below).
• Bookings and invitee details: as long as the host's account keeps them. A host can delete a booking page with its bookings, or the whole account, at any time.
• Sign-in codes: 10 minutes. Signed-in sessions: up to 30 days.
• Rate-limit counters: 24 hours at most.
• Server logs: rotated automatically and kept only as long as we need them to run and secure the service. Database backups: encrypted, and deleted after 30 days.

Connections to Calendli use HTTPS. Sign-in tokens from Google or Microsoft are encrypted in our database, the links in booking emails are signed so they can't be guessed, and backups are encrypted. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.

You can ask to see, correct or delete your personal data, or withdraw consent where we rely on it. Hosts can change their profile, booking pages and hours in the dashboard at any time, and can delete their account themselves in the Android app, in Settings, or on our Delete your account page, which also says what is deleted and what is kept. For anything else, including a copy of your data, email narayanaglobalventures@gmail.com. We reply within 30 days.

Invitees can reschedule or cancel from the links in their confirmation email. To see or delete the details you gave a host, ask the host, or write to us and we will help.

If you are in India, you have the rights the Digital Personal Data Protection Act, 2023 gives you: to get a summary of your personal data and how it is used, to have it corrected, completed, updated or erased, to nominate someone to act for you, and to have your grievances addressed.

Our Grievance Officer is reachable at narayanaglobalventures@gmail.com (write “Grievance Officer” in the subject). If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

Under the GDPR (and the UK GDPR) you also have the right to restrict or object to how we use your data and to receive it in a portable format. You can complain to the data protection authority where you live or work.

Calendli is not meant for children. Hosts must be adults, and we don't knowingly collect data from anyone under 18. If a booking is for a child, for example a class, a parent or guardian should make it.

When we change this policy, we update the date at the top of this page. If a change matters, we will also email hosts before it takes effect.

Narayana Global Ventures Private Limited, Jiroul Nakta Tol, PO Jiroul, PS Khirhar, District Madhubani, Bihar 847230, India. Email narayanaglobalventures@gmail.com. See also our terms of service.