سياسة الخصوصية

1. Controller

iSAP Solutions Ltd
14 Castle Walk, Lower Street
London-Stansted, Essex, CM24 8LY
United Kingdom

Email: office@isap.one
Phone: +44 204 654 2848

For all questions about data protection and to exercise your rights, write to us at the email address above.

2. What this is about

iCalendar.one connects your calendars (Microsoft 365, Google, iCloud, CalDAV, ICS), calculates your free times, accepts bookings and enters them into your calendar with a meeting link. We only process the data needed for this. The data is stored on servers in the European Union.

3. Visiting the website

When you open the website, our server processes technically necessary data (IP address, time, requested address, browser identifier) to deliver the page and to protect it against abuse (Art. 6(1)(f) GDPR). We delete server logs after 14 days at the latest. We use no analytics or advertising tools, no tracking cookies, and load no third-party content at runtime.

4. Demo requests

When you request a demo, we store your name, email address and, if given, company and message to answer your request (Art. 6(1)(b) GDPR). To prevent abuse we do not store your IP address itself, only a daily changing, encrypted check value. We delete requests no later than twelve months after they are closed.

5. Your account

Sign-in works exclusively through your iSAP account (account.isap.one). We receive your account identifier, email address and name. We never see passwords.

6. Connected calendars and services

• Access data (access tokens, for iCloud an app-specific password) is stored encrypted (AES-256-GCM).
• Calendar list: name, colour, time zone and whether we may write.
• Events only from calendars you mark as “busy” or choose as target calendar for bookings: title, start, end, all-day, busy or free, series identifier. We keep only the period from 30 days back to 365 days ahead.
• Device calendar (iPhone app): only start and end of busy times, no titles.
• Booked appointments are entered into, changed in or deleted from your target calendar, optionally with a Teams, Meet or Zoom link.

The legal basis is the performance of our contract with you (Art. 6(1)(b) GDPR). When you disconnect an account, we delete its access data and all stored events and revoke access at the provider where the provider allows it.

7. Google user data

When you connect a Google account, iCalendar.one gets access, with your consent, to: your calendar list (read only), the events in your calendars (read and write), and your account identifier and email address.

• We use this data only to calculate your busy times, to show your calendars in iCalendar.one and to create, change and delete booked appointments (with a Google Meet link) in your calendar.
• We do not sell this data, do not use it for advertising, do not share it with third parties (except as needed to provide the service or required by law) and do not use it to train AI models.
• No human reads this data unless you expressly agree, it is needed for security or abuse prevention, or it is required by law.
• iCalendar.one’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can end access at any time: with “Disconnect” in iCalendar.one or in your Google account at myaccount.google.com/permissions.

8. Microsoft, Zoom and Apple

For Microsoft 365 we use the permission to read and write your calendars. For Zoom we only create, change and delete meetings for booked appointments; if you remove the iCalendar.one app in Zoom, we delete the connection. For iCloud we access your calendars via CalDAV with your app-specific password. The same principles as for Google apply.

9. Recipients

We use a hosting provider in the EU as processor. We transfer data to the providers you connect (Google, Microsoft, Zoom, Apple) only at your request, for example when an appointment is entered; their privacy policies apply there. There are no other recipients.

10. Cookies

We only set technically necessary cookies: the session after sign-in (ical_session, at most 24 hours), short-lived cookies during sign-in and when connecting an account, and for notices after submitting a form (a few seconds). We use no tracking or advertising cookies.

11. Artificial intelligence

AI features of the iPhone app (Apple Intelligence) run on your device. Health, payment and personnel data is processed with AI only on the device. AI suggestions are marked and editable; the app is fully usable without AI.

12. Retention

We store your data as long as your account or the respective connection exists. Events more than 30 days in the past are deleted automatically. Statutory retention obligations remain unaffected.

13. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You can withdraw consent at any time with effect for the future. You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

14. Changes

We update this policy when the service or the law changes. The version published here applies.