Privacy

• Event details you enter: title, optional description, date window, duration, and timezone.
• Email addresses: yours as organizer, and the ones you invite, so we can send invitations and calendar invites.
• Calendar busy times: the start and end times of blocks when a connected calendar is busy, or the times you review and confirm from a photographed schedule. We do not read event titles, guests, locations, attachments, or notes.
• Calendar connection metadata: which provider and account is connected, which calendars contribute availability, and which calendar the confirmed meeting is written to.
• Operational data: email delivery outcomes, and a one-way hash of the network address that created an event, used only for rate limiting. The address itself is never stored.

• The contents, titles, or attendees of your existing calendar events.
• Schedule photos or recognized text. In the iOS app, both remain on your device and are discarded after you review the resulting busy times.
• Contacts, files, location, or advertising identifiers.
• Anything used for advertising or sold to anyone.

Events are read from and written to your calendar provider, Google, Microsoft, Apple, or Exchange, with your explicit authorization, which you can revoke at any time from that provider’s account settings. Email is delivered through Amazon Simple Email Service. Data is stored in Turso. Each of these processes data only to provide the service.

Event data, participant addresses, and calendar connections are kept while scheduling is active. A confirmed event becomes eligible for deletion 90 days after the meeting ends; a cancelled or unsuccessful event becomes eligible 90 days after that outcome. Eligible data is removed by the next daily deletion run. Disconnecting a calendar immediately removes its stored authorization and any unfinished connection request. We also try to revoke access with the provider; you can revoke the app’s consent from the provider’s account settings at any time.

Cancelling an event from the organizer page stops all processing for it. To have an event and its associated data deleted outright, email support@finda.day from the organizer address, or from any invited address to remove yourself. We action deletion requests within 30 days.

Calendar authorizations are encrypted at rest with authenticated encryption. Invitation links are unguessable capabilities; the organizer’s management view requires a separate credential that is never included in an invitation.

Questions about any of this go to support@finda.day.