Privacy Policy

1. Who we are

Orbit Cal ("we", "us") provides a scheduling and booking service at orbitcal.de. This policy explains what information we process when you use the Service.

2. Data we collect

Depending on how you use Orbit Cal, we may process:

• Account data — name, email, username, password hash, timezone, and profile details you provide.
• Booking data — event types, availability, and booking details (including attendee name, email, timezone, notes, and meeting times).
• Calendar connection data — if you connect Google Calendar, OAuth tokens and related metadata needed to read busy times and create or update calendar events (including optional Google Meet links).
• Technical data — server logs, IP address, browser type, and basic usage signals needed to operate and secure the Service.

3. How we use data

• Provide, maintain, and improve the Service
• Authenticate you and secure accounts
• Create and manage bookings and notifications
• Sync with Google Calendar when you connect that integration
• Send transactional email (confirmations, cancellations)
• Detect abuse, debug issues, and meet legal obligations

We do not sell your personal data.

4. Legal bases (EEA/UK)

Where applicable, we process data to perform our contract with you, based on your consent (for example Google Calendar OAuth), and for legitimate interests such as securing and improving the Service, or where required by law.

5. Sharing

We share data with processors who help us run Orbit Cal, including hosting, database, email, and (when enabled) Google for Calendar and Meet. Attendees you invite receive booking details you initiate. We may disclose information if required by law or to protect rights and safety.

6. International transfers

Infrastructure providers may process data in the EU, UK, US, or other regions. Where required, we rely on appropriate safeguards (such as standard contractual clauses) offered by those providers.

7. Retention

We keep account and booking data while your account is active and for a reasonable period afterward for security, dispute resolution, and legal compliance. You may request deletion of your account and associated personal data subject to legal retention needs.

8. Security

We use industry-standard measures such as encrypted transport (HTTPS), hashed passwords, and access controls. No method of transmission or storage is perfectly secure.

9. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or export your personal data, and to object to certain processing or withdraw consent. Contact us using the details below. You may also lodge a complaint with your local supervisory authority.

10. Cookies

We use essential cookies/session tokens required for authentication and security. We do not use advertising cookies.

11. Children

Orbit Cal is not directed at children under 16, and we do not knowingly collect their personal data.

12. Changes

We may update this policy from time to time. The "Last updated" date above will change when we do. Continued use of the Service after changes means you accept the updated policy.

13. Contact

Privacy questions: privacy@orbitcal.de