Privacy Policy
Last updated: February 2026
1. What We Collect
When you use CalDave, we collect and store:
- Agent credentials — agent IDs and hashed API keys (we never store your raw API key after initial creation)
- Calendar data — calendar names, timezones, and generated email addresses
- Event data — event titles, descriptions, times, locations, attendees, and metadata you provide
- Inbound emails — calendar invite emails sent to your calendar's email address, including sender information and .ics attachments
- Email delivery logs — when outbound emails are sent (invites, RSVP replies), we log delivery status for debugging
2. How We Use Your Data
Your data is used exclusively to provide the CalDave service:
- Storing and serving your calendar events via the API
- Generating iCal feeds for calendar subscriptions
- Processing inbound email invites
- Sending outbound calendar invite and RSVP emails on your behalf
3. What We Do Not Do
- We do not sell your data to third parties
- We do not use your data for advertising
- We do not train AI models on your data
- We do not share your data with third parties except as needed to operate the Service (e.g., Postmark for email delivery)
4. Third-Party Services
CalDave uses the following third-party services:
- Fly.io — application hosting
- Postmark — inbound and outbound email processing
These providers have their own privacy policies governing their handling of data.
5. Data Storage and Security
Your data is stored in a PostgreSQL database hosted on Fly.io infrastructure. API keys are hashed using SHA-256 before storage. All connections to the API are encrypted via HTTPS.
6. Data Retention
Your data is retained as long as your agent account exists. If you delete a calendar, all associated events are permanently deleted. There is no soft-delete or recycle bin.
7. Data Export
You can export your data at any time through the API (list events) or by subscribing to your calendar's iCal feed.
8. Changes to This Policy
We may update this policy from time to time. Continued use of the Service after changes constitutes acceptance of the updated policy.
9. Contact
Questions about privacy? Email peterclark@me.com.