Privacy policy
Last updated: 26 October 2026
This policy explains what personal data Calendio collects, why, and what you can do about it. It covers the Calendio web app at app.calendio.ai, the booking pages at calendio.ai, the Calendio API, and this website.
Who we are
Calendio is a Salesforge product, operated by Salesforge, a company registered under EU laws ("Calendio", "we", "us"). It uses the same accounts as Salesforge.
For anything about this policy or your data, email hey@salesforge.ai.
Our two roles
- For our customers' accounts (the people who sign up and use Calendio), we decide how the data is used. We are the controller.
- For our customers' leads (the people who are invited to book a meeting through Calendio), we process data on our customer's behalf and on their instructions. The customer is the controller. If you're a lead and want to use your rights, you can contact the company that sent you the link, or us, and we'll pass it on.
What we collect
Account data
Your name, email address and sign-in details when you create an account or sign in with Google. Sign-in is handled by Google Firebase Authentication. We also keep your workspace, its members and their roles, and the settings, meeting links, availability and page templates you create.
Calendar data
When you connect a Google or Microsoft Outlook calendar, we receive an access token for it. With that access we:
- read the times you are busy, so leads are only offered times you're free;
- create, move and delete the calendar events for meetings booked through Calendio, including their Google Meet or Microsoft Teams call;
- receive notice when those events change, so bookings stay in sync.
We don't read the titles, descriptions or attendees of other events in your calendar. The refresh token for your calendar is stored encrypted (AES-256-GCM). You can disconnect a calendar at any time, which revokes Calendio's access where the provider allows it.
Lead data
Our customers send us details about their leads to create personal booking links: usually the lead's email address, name and company, and any other fields the customer chooses to include. Salesforge sends these when a customer uses Calendio with their Salesforge campaigns.
Booking data
When a lead books, reschedules or cancels a meeting, we keep the time, their name and email, any notes they add, and the reason if they cancel. These go into the calendar event and the emails about the booking.
Booking page activity
When a lead opens their booking page, we record that it was opened and when, so our customer can see whether it was viewed. We use the browser's user agent only to ignore bots, link previews and email scanners, and we don't count views by the customer's own team. We don't track leads across other websites.
This website
This site doesn't use cookies, analytics or advertising trackers. Our hosting provider, Cloudflare, processes technical data such as IP addresses to deliver the site and protect it from abuse.
How we use it
- to provide Calendio: booking pages, calendar sync, meetings and their emails;
- to show our customers how their booking links perform;
- to send the emails a booking needs: confirmations, reminders 24 hours and 1 hour before a meeting, and notices when a meeting is booked, moved or cancelled;
- to send data to the webhooks and integrations our customers set up;
- to keep Calendio secure, prevent abuse and fix problems;
- to meet our legal obligations.
Our legal bases are performing our contract with our customers, our legitimate interest in running and securing the service, and, where required, your consent. We don't sell personal data, and we don't use it for advertising.
Google user data
Calendio's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We use Google Calendar data only to provide the scheduling features described above, as you can see them in Calendio. We don't use it for advertising, we don't sell it, we don't use it to train AI models, and people at Calendio don't read it, except with your permission, for security, or where the law requires it.
Who we share it with
We use these service providers, who process data for us under contract:
- Amazon Web Services: hosting and database (Frankfurt, Germany);
- Google Firebase: sign-in;
- Google and Microsoft: the calendars you connect;
- Resend: sending email;
- Cloudflare: DNS and hosting this website;
- Salesforge: accounts shared with Salesforge.
We also send data where our customers tell us to, such as their webhooks and integrations. We may disclose data if the law requires it. Some providers may process data outside the European Economic Area; where they do, we rely on safeguards such as the European Commission's Standard Contractual Clauses.
How long we keep it
We keep account and workspace data while the account is open. Calendar access is removed when you disconnect the calendar. Lead and booking data is kept for as long as our customer keeps it in Calendio. When you ask us to delete your data, or an account is closed, we delete it unless the law requires us to keep it.
Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict how we use it, and to withdraw consent. To use any of them, email us at the address above. You can also complain to your data protection authority.
You can remove Calendio's access to your Google account at any time at myaccount.google.com/permissions, and to your Microsoft account at account.live.com/consent/Manage or through your organization's administrator.
Security
Data is encrypted in transit, calendar tokens are encrypted at rest, and access to production systems is limited to the people who need it.
Children
Calendio is a business tool and isn't meant for anyone under 16.
Changes
If we change this policy, we'll update the date at the top. If the changes are significant, we'll tell our customers before they take effect.