GDPR Compliance

Cal ID, Inc. ("us", "we", or "our") is committed to protecting your personal data and respecting your privacy. This page explains how we comply with the General Data Protection Regulation (GDPR) and what rights you have as a data subject.

Cal ID, Inc. is the Data Controller for personal data collected through cal.id. As Data Controller, we determine the purposes and means of processing your personal data.

If you have any questions about how we handle your data, contact us at: support@cal.id

We process your personal data under the following lawful bases as defined by GDPR Article 6:

• Contract performance: Processing necessary to provide the scheduling services you have signed up for.
• Legitimate interests: Processing necessary for our legitimate business interests, such as improving the service and preventing fraud.
• Consent: Where you have given explicit consent, e.g. for marketing communications.
• Legal obligation: Processing necessary to comply with applicable laws and regulations.

We collect and process the following categories of personal data:

• Identity data: name, username or similar identifier
• Contact data: email address, phone number
• Technical data: IP address, browser type, time zone, operating system
• Usage data: information about how you use our website and services
• Calendar data: availability, booking details, meeting metadata

We do not collect any Special Category data (health, religion, ethnicity, etc.) unless explicitly required and consented to.

Under GDPR, you have the following rights regarding your personal data:

1. Right of access - You can request a copy of the personal data we hold about you.
2. Right to rectification - You can ask us to correct inaccurate or incomplete data.
3. Right to erasure ("right to be forgotten") - You can request deletion of your personal data where there is no compelling reason for us to continue processing it.
4. Right to restriction of processing - You can ask us to suspend processing of your data in certain circumstances.
5. Right to data portability - You can request a copy of your data in a structured, machine-readable format.
6. Right to object - You can object to processing of your data where we rely on legitimate interests.
7. Rights related to automated decision-making - You have the right not to be subject to decisions based solely on automated processing.

To exercise any of these rights, email us at support@cal.id. We will respond within 30 days.

We retain personal data only as long as necessary for the purposes set out in our Privacy Policy, or as required by law. When your data is no longer needed, we securely delete or anonymise it.

Cal ID, Inc. is based in India and operates globally. Your data may be transferred to and processed in countries outside the European Economic Area (EEA). Where such transfers occur, we ensure appropriate safeguards are in place - including Standard Contractual Clauses (SCCs) approved by the European Commission - to protect your data to EEA standards.

We enter into Data Processing Agreements (DPAs) with all sub-processors who handle personal data on our behalf. Our sub-processors are required to implement appropriate technical and organisational measures to protect your data.

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, or unauthorised disclosure. These measures include encryption in transit (TLS), access controls, and regular security reviews.

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with your local supervisory authority. In the EU/EEA, you can find your authority at edpb.europa.eu.

Before escalating, we encourage you to contact us directly at support@cal.id - we will do our best to resolve your concern promptly.

For any GDPR-related enquiries, please contact us at:

Email: support@cal.id