Privacy policy
Last updated 9 October 2026
calendarnexus copies your Outlook calendar into your own Google calendar. To do that it needs to keep very little about you, and it keeps nothing it does not need.
Who we are
calendarnexus is based in the United Kingdom and is the data controller for the information described here. Contact: hello@calendarnexus.co.uk.
What we store
- A random identifier, kept in a cookie in your browser, so the home page can show you your own connections.
- A one-way hash of your Microsoft account's tenant and object identifiers, so the same Outlook account finds its settings again from any browser. The hash cannot be turned back into your account.
- Access keys (OAuth refresh and access tokens) issued by Microsoft and by Google when you connect. Microsoft's allows reading your calendar, or reading and writing it once you turn on two-way; Google's allows managing calendars in your Google account.
- Dates: when you connected, and the date your subscription is paid until.
- A one-line status of your last sync: counts of events and any error message returned by Microsoft or Google.
- Your Stripe customer and subscription identifiers, if you subscribe.
What we do not store
Your calendar events, their titles, attendees or contents. Your name. Your email address. Your contacts. Each minute, events are read from Microsoft and written to Google in the same request, and nothing about them is retained. The only trace left behind is a change marker stamped on each copied event inside your own calendars (in Google, and in Outlook with two-way), which lets the next run tell what changed.
Why we process it
To provide the service you asked for when you connected your accounts (UK GDPR Article 6(1)(b), performance of a contract) and to take payment for it. We do not use your data for anything else: no advertising, no profiling, no analytics, and we never sell or share it.
Where it is kept, and by whom
- Cloudflare hosts the service and stores the records above in Workers KV, which replicates data across Cloudflare's global network. Cloudflare processes data under its Data Processing Addendum, which includes the UK and EU standard contractual clauses for international transfers. Cloudflare also keeps short-lived operational logs (request time, path, IP address, and our status line).
- Microsoft and Google provide your calendars; your data with them is governed by their own policies. We ask Microsoft for
Calendars.Read(Calendars.ReadWriteonce you turn on two-way) and Google for calendar access. - Stripe handles payment. Stripe collects your email address and card details at checkout under its own privacy policy; we see the customer identifier and the email on the receipt in our Stripe account, and never your card number.
Google API Services User Data Policy
calendarnexus's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google data is used only to create and maintain the Outlook calendar in your Google account.
How long we keep it
- Until you press Disconnect and delete my data on the home page, which deletes your record immediately, revokes the Google access and cancels any subscription.
- Records from a set-up that was never completed (one account connected, never the second) are deleted after one day.
- Records whose free month or subscription ended more than 90 days ago are deleted.
- Stripe retains payment records for as long as financial regulations require.
You can also withdraw access from your side at any time: Microsoft account app access (personal accounts) or My Apps (work accounts), and Google account permissions. Once either key is revoked the sync stops.
Cookies
Two, both strictly necessary and set only by this site: id (your random identifier, one year) and oauth_state (a ten-minute token that protects the sign-in hand-off). No analytics, advertising or third-party cookies, so there is no cookie banner to click.
Your rights
Under the UK GDPR you can ask for a copy of what we hold about you, have it corrected or deleted, or object to its processing. The quickest way to delete everything is the button on the home page; for anything else, email hello@calendarnexus.co.uk. You also have the right to complain to the Information Commissioner's Office.
Changes
If this policy changes, the date at the top changes with it, and any change that affects what we store will be shown on the home page before it applies.