Privacy Policy

Calendo (“we”, “us”) is an interview scheduling service operated at calendo.org. This policy explains what information we collect when you use Calendo, how we use it, and the choices you have. Calendo is open source, so you can also read exactly how it handles data in its source code.

Information we collect

• Account information — your name, email address, organization and a hashed password.
• Scheduling data — the event types, availability, scheduling links and interviews you create, and the details candidates enter when they book (name, email address, time zone and any answers you ask for).
• Connected accounts — when you connect Google Calendar or Zoom, the account’s ID and email address and the OAuth tokens that let Calendo act on your behalf. Tokens are encrypted at rest.
• Technical data — IP addresses and request logs used for security, rate limiting and troubleshooting, and an audit log of changes made in your organization.

Google user data

If you connect Google Calendar, Calendo requests these permissions:

• Your email address and basic profile — to show which Google account is connected.
• Read your calendars (calendar.readonly) — to list your calendars so you can choose which ones to check, to find times you are busy so candidates are only offered free slots, and to show your existing events next to interviews in Calendo’s calendar view.
• Create and manage events (calendar.events) — to add each interview to the calendar you choose, update it when the interview is rescheduled, and remove it when it is cancelled.

Calendo stores the list of your calendars (name, color, time zone and your access level) and the IDs of the interview events it created. Titles, guests and times of your other events are read when they are needed to check availability or draw your calendar, held in memory for at most a few minutes, and never written to our database.

We do not sell Google user data, use it for advertising, use it to train AI or machine-learning models, or share it with anyone except as needed to provide the features above, to comply with the law, or with your consent. Calendo’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Zoom data

If you connect Zoom, Calendo creates, updates and deletes a meeting for each interview and stores the meeting’s ID and join link. We do not access your recordings, chats or other meetings.

How we use information

• To provide scheduling: showing availability, booking interviews, and creating calendar events and video meetings.
• To send the emails the service depends on — confirmations, reminders, reschedules, cancellations and account emails.
• To keep Calendo secure, prevent abuse and fix problems.

We do not sell personal information and do not use it for advertising.

Sharing

Interview details are shared with the people taking part in that interview. Otherwise we share data only with the service providers that run Calendo (hosting, database and email delivery), who process it on our behalf, and when required by law.

Retention and deletion

We keep your data while your account is active. Disconnecting Google Calendar or Zoom revokes Calendo’s access and deletes the stored tokens immediately; you can also remove Calendo’s access at any time from your Google Account’s third-party connections page. To delete your account and its data, email us at the address below.

Security

Data is sent over HTTPS, OAuth tokens are encrypted at rest, passwords are hashed, and each organization’s data is isolated from every other organization’s.

Changes

If we change this policy we will update the date above, and tell account owners by email about any significant change.

Contact

Questions or requests about your data: scheduling@calendo.org