Governance document

CA-D-000563

Calendly Privacy Notice

Calendly

Last change detected July 4, 2026 Privacy policy

SHA-256: 9c4f19c5c822aa52a1b… 2 versions captured 1 change documented

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

View original document at Calendly ↗

This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology

80 Total

23 High severity

41 Medium severity

16 Low severity

Key Facts

May Calendly sell or share information to the extent its use of cookies and tracking technologies for targeted advertising or analytics purposes constitutes a 'sale' or 'share' under the CCPA?

Calendly may sell or share information to the extent its use of cookies and tracking technologies for targeted advertising or analytics purposes constitutes a 'sale' or 'share' under the CCPA.

When is Calendly liable under the Principles?

Calendly is liable under the Principles when it transfers Personal Data to a third party acting as its agent and that agent processes the Personal Data in a manner inconsistent with the Principles.

What will Calendly do if it discovers that a child under 18 has provided it with Personal Data?

If Calendly discovers that a child under 18 has provided it with Personal Data, Calendly will promptly delete that Personal Data from its systems.

Is Calendly directed to children under 18?

Calendly is not directed to children under 18 and does not knowingly collect Personal Data from children under 18.

Does Calendly knowingly collect Personal Data from children under 18?

Calendly is not directed to children under 18 and does not knowingly collect Personal Data from children under 18.

If a user wishes to exercise rights with respect to data processed by a Calendly customer, who does Calendly direct that user to contact?

If a user wishes to exercise rights with respect to data processed by a Calendly customer, Calendly directs that user to contact the customer which collected their information.

May Calendly send users service and administrative emails as part of the Services?

Calendly may send users service and administrative emails as part of the Services, and users may not opt out of these messages.

May users opt out of these messages?

Calendly may send users service and administrative emails as part of the Services, and users may not opt out of these messages.

What right does Calendly grant users?

Calendly grants users the right to know and access their Personal Data, including the categories collected, sources, purposes of collection, and how it was used, disclosed, sold, or shared.

Do users have the right to opt out of the sale or sharing of their Personal Data?

Calendly recognizes users' right to opt out of the sale or sharing of their Personal Data as those terms are defined by applicable laws.

Stay ahead of the changes

Track Calendly and get the diff the day its terms change.

Monitor Calendly + up to 20 platforms — $4.99/mo →

Summary

Calendly's Privacy Notice explains what personal information Calendly collects, who it shares that information with, and what rights you have over it. One important detail: if a business or individual uses Calendly to schedule meetings with you, that business — not Calendly — controls your data, and you need to contact them directly to exercise your privacy rights. Calendly may share your information with advertising and analytics partners, and you have the right to opt out of the sale or sharing of your Personal Data.

Analysis

This Privacy Notice establishes how Calendly collects, uses, retains, and shares Personal Data, and delineates the rights users hold over that data. A structural distinction governs the entire document: when Calendly's customers use the Services to collect and process Personal Data, Calendly acts as a processor on behalf of those customers rather than as an independent controller, directing affected individuals to contact the relevant customer to exercise data rights. Calendly may share information with third-party marketing, advertising, analytics, business, and integration partners, and acknowledges that its use of cookies and tracking technologies for targeted advertising or analytics may constitute a sale or share of Personal Data under the CCPA. Personal Data is retained only as long as reasonably necessary to fulfill collection purposes and meet contractual and legal obligations, and Calendly accepts liability under the Principles for agent misconduct when transferring Personal Data to third-party agents.

What this means for you

For an individual user, this document means Calendly may share your Personal Data with a wide range of third-party marketing, advertising, and analytics partners, and that activity may qualify as a sale or share of your data under applicable law. Calendly will not use an email address you provide solely to schedule a meeting for direct marketing purposes, and it will not send service emails you can opt out of. You have the right to know what Personal Data Calendly has collected about you, how it was used and shared, and the right to opt out of its sale or sharing — you can exercise those rights directly with Calendly. However, if your data was collected through a Calendly customer's scheduling tool, you must contact that customer directly to exercise your data rights.

Institutional Analysis

Stay ahead of the changes

Institutional analysis available with Insight

Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.

Monitor Calendly + up to 20 platforms — $4.99/mo → Get the research letter, free

1 important change detected

2 versions captured · Last updated: July 2026

July 4, 2026

low

What changed Calendly updated its Privacy Notice effective July 3, 2026, making several changes to how it describes data practices and contact procedures. The policy now describes collected data as 'data' rather than 'Personal Data' and adds 'publicly available information' to the list of processed information types. References to a specific Microsoft partnership example were removed. Multiple contact procedures now direct users to 'contact us by email' instead of specifying the privacy@calendly.com address, and the sub-processors list reference was reformatted.

Why this matters The updated Privacy Notice adds 'publicly available information' to the categories of data Calendly may process when customers use the Services. The notice no longer provides a specific Microsoft partnership example. Contact procedures for privacy requests and questions now refer to contacting Calendly 'by email' rather than specifying privacy@calendly.com, though the functional contact method remains unchanged. These changes are largely clarifications and do not materially alter the data collection, processing, or privacy request procedures available to users.

View full change record →

Featured, High severity

Calendly acts as processor for customer data Compare →

The processor designation means Calendly does not control the purposes or means of processing that customer-directed data, which affects whose privacy obligations govern that data and where affected individuals must direct rights requests.

Added July 10, 2026 Standard Seen across 296 platforms
Calendly liable for agent DPF violations Compare →

Calendly's acceptance of liability for agent misconduct under the Principles means individuals retain a recourse pathway against Calendly even when the violation is committed by a downstream agent.

Added July 10, 2026 Standard Seen across 229 platforms
CCPA cookie sale or share disclosure Compare →

Acknowledging potential CCPA-covered sales or shares through tracking technologies triggers California consumers' right to opt out of such activity.

Added July 10, 2026 Standard Seen across 273 platforms
Child data discovered must be deleted Compare →

The prompt deletion commitment limits the period during which a minor's Personal Data can remain in Calendly's systems following discovery.

Added July 10, 2026 Standard Seen across 277 platforms
Children under 18 data prohibition Compare →

The 'knowingly' qualifier means the prohibition is limited to collection Calendly is aware of, not to inadvertent collection from underage users who misrepresent their age.

Added July 10, 2026 Standard Seen across 245 platforms
Direct data subject to customer controller Compare →

Routing rights requests to the customer rather than Calendly means Calendly is not the point of contact for exercising rights over customer-controlled data, potentially complicating access for individuals who do not know which customer holds their data.

Added July 10, 2026 Standard Seen across 290 platforms
Mandatory service communication no opt-out Compare →

Because opt-out is expressly prohibited, users must receive these communications for as long as they use the Services, regardless of personal preference.

Added July 10, 2026 Standard Seen across 279 platforms
Right to know and access personal data Compare →

Articulating this right establishes that users can request a substantive accounting of how their Personal Data has been handled across collection, use, disclosure, sale, and sharing.

Added July 10, 2026 Standard Seen across 290 platforms
Right to opt out of sale or sharing Compare →

Recognizing this right means users have a mechanism to prevent Calendly from selling or sharing their Personal Data, with the scope of 'sale' and 'sharing' determined by applicable legal definitions.

Added July 10, 2026 Standard Seen across 290 platforms

Featured, Medium severity

No marketing to scheduling email addresses Compare →

It limits Calendly's use of scheduling-context email addresses, preventing them from being repurposed for marketing without the user's knowledge.

Added July 10, 2026 Standard Seen across 282 platforms
Personal data retention necessity standard Compare →

The reasonably necessary standard governs how long Calendly can hold Personal Data, limiting indefinite retention but leaving duration to Calendly's judgment.

Added July 10, 2026 Standard Seen across 275 platforms
Third party advertising analytics partner sharing Compare →

Information may flow beyond Calendly to a broad range of third parties, including those whose primary purpose is advertising and marketing.

Added July 10, 2026 Standard Seen across 288 platforms