Privacy Policy

Last Updated: August 2026

Caliyo is operated by Caliyo Inc., 47 Nevada Ave, North York, Ontario, M2M 3N9, Canada, which is the controller of the personal data described in this policy.

Information We Collect

We collect information necessary to provide our calendar management service:

Account information (name, email address)
Calendar data from connected accounts (events, schedules)
Contacts and Workspace directory data from connected accounts — only if you grant access — to help you schedule with the right people
Usage data about how you interact with Caliyo to improve the service
A device notification token, if you use the mobile app and turn on notifications, so we can deliver reminders and alerts to your device
Payment information (processed securely by Stripe)

How We Use Your Information

To provide and improve our calendar management services
To personalize AI scheduling recommendations
To communicate important service updates
To process payments and prevent fraud

How We Share Your Information

We do not sell your personal information or your Google user data, and we do not share it with third parties for advertising. We share information only with the service providers (sub-processors) that help us operate Caliyo, and only as needed to provide the service:

Amazon Web Services (AWS) — cloud hosting, storage, and infrastructure. Your account data and connected calendar and contact data are stored and processed on AWS.
Anthropic (Claude), via Amazon Bedrock — our AI provider. When you use Caliyo's AI scheduling and assistant features, the relevant calendar and request context is sent to the AI model to generate suggestions and responses in real time.
Stripe — payment processing. Stripe receives your billing details to process subscription payments; it does not receive your calendar, contact, or Google user data.

Each of these sub-processors is bound by contract to provide the same or equal protection of your data as described in this policy, to use it only to deliver services to Caliyo, and never for their own purposes.

We may also disclose information if required by law, to protect our rights, or in connection with a business transfer (with notice to you).

Google User Data and Limited Use

Caliyo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

We access your Google Calendar — and, only if you grant it, your Google contacts and Workspace directory — solely to provide the Caliyo scheduling, booking, and contact features you request.
Google user data is never used to develop, improve, or train generalized or non-personalized AI or machine-learning models. AI features process your data only to generate results for you, in real time.
We do not sell Google user data, and we do not share it with any third party except the service providers listed above that are necessary to operate the features you use.
You can disconnect your Google account at any time and request deletion of your associated data.

The Caliyo Mobile App

The mobile app asks for a small number of device permissions. Each one is optional, is requested only at the moment the feature is used, and can be revoked at any time in your device settings:

Camera — to scan a booking QR code. The image is decoded on your device and is never uploaded or stored by Caliyo.
Microphone and speech recognition — to let you speak to the AI assistant instead of typing. Your speech is converted to text by your device’s own speech-recognition service, which may process the audio on the device or on the operating-system vendor’s servers (Apple on iOS, Google on Android) under their privacy policies. Caliyo receives only the resulting text, and does not keep a copy of the recording.
Notifications — to deliver reminders and alerts. We store a device notification token for as long as notifications are enabled.

The mobile app does not collect your location, does not access your photo library, and contains no third-party advertising or analytics software.

Data Security

Your data is encrypted at rest and in transit. We use industry-standard security measures to protect your information. We never share your calendar data with third parties for marketing purposes.

Data Retention and Deletion

We keep your data for as long as your account is active. You can delete your account and all associated data at any time, either from inside the app (profile → Delete my account) or, if you no longer have access to the app, by emailing us from your account email address. Full instructions are on our account deletion page.

Deletion removes your account and profile, calendar data and events stored by Caliyo, your connected calendar authorizations, and your AI conversation history, bridges, and bookings. There is a 7-day grace window during which you can sign back in to cancel; after that it is permanent. Requests made by email are completed within 30 days. Deleting your Caliyo account does not delete events from your Google or Microsoft calendars themselves — only Caliyo’s copies and access. Records we are legally required to keep, such as billing records, are retained only as long as the law requires.

You can withdraw consent at any time by disconnecting a connected account in Caliyo, or by revoking Caliyo’s access directly in your Google account permissions or Microsoft account settings.

Your Rights

You have the right to:

Access your personal data
Request correction of inaccurate data
Request deletion of your data — see Delete Your Account
Export your data in a portable format
Withdraw consent for connected accounts at any time
Opt out of marketing communications

Contact Us

For privacy-related inquiries, please contact us at support@caliyo.com, or write to Caliyo Inc., 47 Nevada Ave, North York, Ontario, M2M 3N9, Canada.