Privacy Policy

Effective date: March 15, 2026

Introduction

DxCal (“we”, “us”, “our”) operates the website https://dxcal.com. This privacy policy explains how we collect, use, store, and protect your personal information when you use our calendar and scheduling platform.

Information We Collect

Account Information

When you create an account, we collect your name and email address.

Calendar Data

When you connect third-party calendars (Google Calendar, Apple Calendar, Outlook, or others), we access and synchronize your event data, schedules, and calendar metadata. This data is used solely to provide the calendar synchronization and scheduling features you have requested.

Booking Data

If you use our booking features, we collect appointment details and client information provided during the booking process, including names, email addresses, and scheduling preferences.

Notification Preferences

We store your notification configuration, including connections to Telegram, email, Pushover, and ntfy services. We store the minimum credentials required to deliver notifications through these channels.

Analytics

We collect technical data including IP address, browser type, device information, pages visited, and interaction patterns to improve our services and user experience.

How We Use Your Information

We use your personal information to:

  • Provide calendar synchronization across your connected accounts
  • Manage appointment bookings and send confirmations
  • Track goals and display scheduling insights
  • Deliver notifications through your preferred channels
  • Send account-related communications (security alerts, billing, support)
  • Analyze usage patterns to improve features and performance
  • Comply with legal obligations
  • Detect and prevent fraud or abuse

We do not sell your personal information to third parties.

Google User Data and Limited Use

DxCal integrates with Google services only when you explicitly connect them:

  • Google Calendar — to read your availability (free/busy) and to create, update, or cancel appointment events on the calendar you connect, solely to power scheduling and prevent double-booking.
  • Google Ads (scopes adwords and datamanager) — only if you connect your Google Ads account. We access the list of Google Ads accounts you can manage so you can select one, create a “Booking” conversion action in the account you choose, and upload offline conversion events (a confirmed booking’s Google Click ID and conversion time) so that your own advertising campaigns can be measured and optimized on real bookings. We never read, modify, or manage your campaigns, budgets, keywords, or ads.

DxCal’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide or improve the user-facing features you have requested; it is never sold, never used for advertising or credit-eligibility decisions, and never used to train generalized or artificial-intelligence models. You can disconnect any Google integration at any time from your settings, which immediately stops all further access and deletes the stored authorization token.

Data Sharing

We share personal information only with:

  • Calendar providers: To synchronize your calendar data (Google, Apple, Microsoft, etc.)
  • Notification services: To deliver notifications through Telegram, Pushover, ntfy, or email providers
  • Hosting providers: For infrastructure and service delivery
  • Legal authorities: When required by law, subpoena, or court order

Data Retention

  • Account data is retained while your account is active and for 30 days after deletion
  • Calendar data is retained while the calendar connection is active and deleted upon disconnection
  • Booking data is retained for the duration of your account and 90 days after deletion
  • Analytics data is retained in anonymized form

Your Rights (CCPA/CPRA)

If you are a California resident, you have the right to:

  • Know what personal information we collect, use, and disclose
  • Delete your personal information, subject to legal exceptions
  • Opt out of the sale or sharing of personal information (we do not sell your data)
  • Non-discrimination for exercising your privacy rights
  • Correct inaccurate personal information
  • Limit use of sensitive personal information

To exercise these rights, contact us at [email protected]. We will respond within 45 days.

We do not sell personal information. We do not use or disclose sensitive personal information for purposes other than those permitted under the CPRA.

Data Security

We implement industry-standard security measures including encryption in transit (TLS) and at rest, access controls, and regular security assessments. Calendar data is encrypted at rest. No system is completely secure, and we cannot guarantee absolute security.

Children’s Privacy

Our services are not directed to individuals under 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

International Data Transfers

Your data may be transferred to and processed in countries outside the United States, including the European Union. These transfers are protected by appropriate safeguards in compliance with applicable law.

Changes to This Policy

We may update this policy periodically. We will notify you of material changes via email or through a notice on our website. Continued use of our services after changes constitutes acceptance.

Contact

For privacy-related questions or to exercise your rights: