Privacy Policy

Account and Identity Information

When you sign in via Google OAuth, we receive your name, email address, Google account identifiers, and profile information from the authorized OAuth scopes. You do not provide your Google password to 2calendars.

OAuth Tokens

We receive and store OAuth access and refresh tokens issued by Google to synchronize your calendars on your behalf. We use these tokens only to access the Google APIs necessary to provide the Service.

Calendar and Event Data

We process calendar data you authorize us to access, including event titles, descriptions, times, locations, attendee information, and other calendar data. By default, mirrored events are written as details-free “Busy” blocks unless you choose to copy full details.

Synchronization Settings

We store your sync configuration, including connected calendars, connection direction, custom titles, and synchronization rules.

Billing Information

If you purchase a paid plan, payment is processed by Stripe. We do not store your full card number. We may receive limited billing information from Stripe, such as subscription status and the last four digits of your card.

Usage and Log Data

We automatically collect technical information such as access times, synchronization activity, error data, IP address, browser type, device type, and approximate location inferred from IP address.

Cookies

We use cookies and similar technologies to operate the Service, keep you signed in, remember preferences, and understand how the Service is used.

We use the information described above to provide, operate, and maintain the Service; create and maintain synchronization connections; apply your sync settings and rules; monitor sync health and send notifications; provide customer support; maintain security and prevent fraud; process payments and manage subscriptions; comply with applicable law; and enforce our Terms of Service.

We do not use Google user data for advertising or to train AI or machine-learning models. Our use of Google user data is limited to providing and improving the synchronization features and acting as you direct.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• we do not sell Google user data;
• we do not use it for advertising;
• we do not use it to train generalized AI or machine-learning models; and
• we limit use to providing and improving the synchronization features you request.

We do not allow humans to read your Google user data except where you have given explicit consent, for security investigations, to comply with law, or where data is aggregated and anonymized.

We do not sell your personal information. We share information only as described in this Privacy Policy.

We share information with service providers that process information on our behalf, including Google (Calendar, OAuth, and APIs), Google Cloud (hosting and storage), and Stripe (payments). We may also share with analytics, infrastructure, and security vendors as needed to operate the Service.

We may disclose information where necessary to comply with applicable law or legal process; enforce our Terms of Service; detect, prevent, or address fraud or security issues; or protect the rights, property, or safety of our users or others.

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this Privacy Policy or a successor policy with substantially similar protections.

Your information may be stored, hosted, and processed in Google Cloud infrastructure located in the United States, Japan, or other regions. By using the Service, you understand your information may be processed outside your country of residence. Where required by applicable law, we take steps to ensure appropriate safeguards for international transfers.

We retain personal information for as long as your account is active and as needed to provide the Service. When information is no longer needed, we take steps to delete or anonymize it, except where retention is required by law. We may retain certain records after account deletion for legal compliance, billing records, fraud prevention, security logs, and dispute resolution. Residual copies in backups are deleted according to our backup-retention schedule.

We use reasonable technical and organizational measures to protect personal information against unauthorized access, disclosure, alteration, and destruction. However, no internet-based service is completely secure, and we cannot guarantee absolute security.

Depending on your location and applicable law, you may have rights to access, correct, or delete your personal information; object to or restrict certain processing; and withdraw consent at any time. You may also revoke the Service’s OAuth authorization through your Google account settings, which will stop future synchronization.

To exercise any of these rights, contact us at [email protected]. We will respond in accordance with applicable law, including the Act on the Protection of Personal Information (APPI) of Japan. We may need to verify your identity before acting on your request.

You can disconnect Google accounts, delete synchronization connections, or delete your 2calendars account through the Service. Disconnecting or deleting does not automatically remove mirrored events already written to your Google Calendar — you may need to delete those manually. After account deletion, we may retain certain information as described in the Data Retention section.

The Service is not directed to children under 18. We do not knowingly collect personal information from children under 18 except where they use the Service with appropriate parental consent and supervision. If you believe a child has provided us with personal information without consent, please contact us at [email protected].

The Service integrates with Google (Calendar, OAuth, and APIs), Google Cloud, and Stripe. These services are governed by their own terms and privacy policies. We encourage you to review their policies to understand how they handle your information.

We may update this Privacy Policy from time to time. When we make changes, we will update the “Last updated” date and, where appropriate, provide notice within the Service or by email. Your continued use of the Service after the effective date constitutes your acknowledgment of the updated policy.

For questions or requests regarding this Privacy Policy, contact us at [email protected].

Operator: Q2A Co., Ltd. (Q2A株式会社)

Registered address: Rm 1538, 2-11-7 Furuishiba, Koto-ku, Tokyo 135-0045, Japan