Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The agreement states that use of AI Features constitutes acknowledgment that Customer Data, including inputs and outputs, will be shared with and processed by unnamed third-party AI providers, and customers consent to this processing by activating AI Features.
This analysis describes what Calendly's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that activating AI Features operates as consent to sharing Customer Data with third-party AI providers whose identities are not specified in the document text. Customers should assess whether this mechanism satisfies GDPR consent and sub-processor disclosure requirements for data involving EU personal data.
Interpretive note: The identities of third-party AI providers are not specified in the Customer Terms text, and the adequacy of consent-by-use for GDPR purposes depends on how AI Features are presented and whether they are optional or bundled into required plan features.
Under this clause, customers who use AI Features are stated to have acknowledged and consented to their Customer Data being shared with and processed by Calendly's third-party AI providers. The agreement does not identify these third-party providers in the Customer Terms text itself.
Cross-platform context
See how other platforms handle AI Features Data Sharing with Third-Party Providers and similar clauses.
Compare across platforms →Monitoring
Calendly has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"Calendly may make available certain AI Features. These features may include technology developed by Calendly or a third-party provider, and by using AI Features, You acknowledge that your Input and Output, including Customer Data, will be shared and processed by these third-party providers. You consent to Calendly using your Customer Data to provide you with the Al Features, and by using the AI Features, you instruct Calendly and its third-party providers to process such Customer Data for the purpose of providing the Al Features.Excerpt from Calendly's Terms of Use
(1) REGULATORY LANDSCAPE: The use of Customer Data by unspecified third-party AI providers engages GDPR sub-processor obligations under Article 28, which require processor agreements with each sub-processor and customer notification of sub-processor changes. CCPA provisions regarding disclosure of data sharing with service providers and the scope of permitted processing also interact with this clause. The EU AI Act may impose additional obligations on AI systems used in the provision of these features depending on their risk classification. (2) GOVERNANCE EXPOSURE: High. The consent-by-use mechanism for AI data sharing may not satisfy GDPR's requirements for informed, specific, and freely given consent in all circumstances, particularly where AI Features are bundled into paid plan tiers. The absence of named third-party AI providers in the Customer Terms text means customers cannot independently assess the data protection practices of those providers without consulting separate documentation. (3) JURISDICTION FLAGS: EU and EEA customers face heightened exposure where the AI Features process personal data of data subjects, requiring DPA-compliant sub-processor agreements and data transfer mechanisms for any cross-border data flows. Customers in regulated industries such as healthcare and financial services should assess whether AI processing of Customer Data complies with sector-specific data governance requirements. (4) CONTRACT AND VENDOR IMPLICATIONS: Enterprise customers with data processing agreements should verify that Calendly's DPA addresses AI Feature sub-processors and that customers receive notification of sub-processor changes. Procurement teams should request the current list of AI sub-processors as part of vendor due diligence. (5) COMPLIANCE CONSIDERATIONS: Legal and privacy teams should assess whether the consent-by-use mechanism for AI Features is consistent with the data minimization and purpose limitation principles applicable in their jurisdictions, conduct data protection impact assessments for AI Feature use involving personal data, and verify that internal records of processing activities reflect AI sub-processor data flows.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes that activating AI Features operates as consent to sharing Customer Data with third-party AI providers whose identities are not specified in the document text. Customers should assess whether this mechanism satisfies GDPR consent and sub-processor disclosure requirements for data involving EU personal data.
Under this clause, customers who use AI Features are stated to have acknowledged and consented to their Customer Data being shared with and processed by Calendly's third-party AI providers. The agreement does not identify these third-party providers in the Customer Terms text itself.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Calendly.