Introduction
Mslice Holdings LLC ("we," "our," or "us") operates CalNudge (calnudge.app), an automated RSVP reminder service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
Information We Collect
- Account information: Your name, email address, and profile picture provided through Google or Microsoft OAuth authentication.
- Calendar data: Event titles, start and end times, timezones, locations, and attendee information (names and email addresses) from your connected calendar. We only access data necessary to provide the service.
- Attendee information: Email addresses and names of meeting attendees from your calendar events. This data is used to send authorized reminder emails and may be used for limited product-related communications (see "Attendee Communications" below).
- Contact form submissions: Name, email address, subject, and message content submitted through our contact form.
- Billing information: Subscription plan, billing interval, and Stripe customer identifiers. Payment card details are processed and stored exclusively by Stripe — we do not have access to your card numbers.
- Usage data: Sync activity, reminder logs, and notification preferences.
- OAuth tokens: Access and refresh tokens encrypted at rest using AES-256-GCM encryption.
How We Use Your Information
- Provide and operate the CalNudge service, including syncing your calendar events and sending RSVP reminder emails.
- Send you daily digest emails summarizing your upcoming meetings (if enabled).
- Send occasional product-related communications to meeting attendees who have received CalNudge reminders, such as feedback surveys or service information. Recipients can opt out at any time.
- Maintain and improve the service and monitor system health.
- Communicate with you about your account and support requests.
Attendee Communications
When a CalNudge user connects their calendar, we collect attendee email addresses from their meeting invitations. We use these addresses to:
- Send RSVP reminders: Automated reminder emails on behalf of the meeting organizer. These are the core function of the service.
- Send limited product communications: We may send a limited number of product-related emails to attendees who have received CalNudge reminders, such as a feedback survey or an introduction to the service. These communications are infrequent and relevant to the recipient's experience with CalNudge.
Attendees may opt out of all CalNudge communications at any time by clicking the unsubscribe link in any email or by contacting us at info@calnudge.app. We will never sell, rent, or share attendee email addresses with third parties for marketing purposes.
How We Share Your Information
We do not sell, rent, or trade your personal information. We may share it only in these limited circumstances:
- SendGrid: Attendee email addresses are transmitted to SendGrid solely for sending authorized reminder and product-related emails.
- Stripe: Billing information is processed by Stripe for subscription management. See Stripe's Privacy Policy.
- Railway: We use Railway for hosting and PostgreSQL for data storage.
- Legal requirements: We may disclose information if required by law or governmental authority.
Google and Microsoft Calendar Access
CalNudge accesses your calendar through OAuth 2.0. We request only read-only calendar access and do not modify, delete, or create calendar events.
Our use of data obtained from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising.
Data Retention
We retain your data for as long as your account is active. If you delete your account, we will delete your personal information within 30 days. Notification logs are retained for up to 12 months. Attendee email addresses collected through calendar events are retained for up to 12 months after the last reminder was sent to that address, after which they are deleted unless the attendee has created their own CalNudge account. Contact form submissions are retained indefinitely for customer support purposes.
Data Security
- AES-256-GCM encryption for OAuth tokens stored in our database.
- HTTPS/TLS encryption for all data in transit.
- Restricted access to production systems.
Your Rights
- Access & Correction: Request a copy or correction of your personal information.
- Deletion: Request deletion of your account by contacting us.
- Disconnect calendar: Revoke CalNudge's access at any time through your CalNudge settings or your Google/Microsoft account settings.
- Opt out of digest emails: Disable daily digest emails from within the CalNudge settings at any time.
- Opt out of attendee communications: If you are a meeting attendee who has received emails from CalNudge, you may opt out of all future communications by clicking the unsubscribe link in any email or by contacting us.
Children's Privacy
CalNudge is not directed to children under 13. We do not knowingly collect information from children under 13.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page.