Calendly Privacy Notice

This document is Calendly's Privacy Notice, governing the collection, use, storage, and sharing of personal data for users of Calendly's scheduling platform, with stated legal bases including consent, legitimate interests, and contractual necessity depending on jurisdiction. The notice asserts that Calendly collects a broad range of data types including contact information, calendar content, device and usage data, payment information, and inferred data from integrations with third-party services, and the terms authorize sharing this data with service providers, business partners, advertising networks, and affiliated entities. Notably, the notice draws a distinction between 'users' (account holders who create scheduling pages) and 'invitees' (recipients of scheduling links who may not have a Calendly account), meaning individuals who have never signed up for Calendly may have their personal data collected when they book a meeting through a Calendly-hosted link; this has operational implications for consent and transparency obligations that may not be fully resolved by the notice alone. The notice references compliance with GDPR, UK GDPR, CCPA/CPRA, and other regional frameworks, and identifies Standard Contractual Clauses as a cross-border data transfer mechanism; California residents and EU/EEA/UK residents are granted specific enumerated rights. Material compliance considerations include the adequacy of consent mechanisms for invitees who are not direct customers of Calendly, the scope of data sharing with advertising and analytics vendors, and the retention and deletion practices described in general terms without specific timeframes for most data categories.