Privacy

CalRound is a software product owned and operated by SEVI WORLD LIMITED, registered in England and Wales under company number 16462263, with registered office at 18 Park Street, London, W1K 2HZ, United Kingdom. SEVI WORLD LIMITED is the data controller for the CalRound service, except where it acts as processor for an organisational customer, and controls account, billing, service administration, security and business-contact data. Contact our privacy team at [email protected].

When an organisation uploads personal data in schedules or attachments for its own purposes, that organisation is normally the controller and SEVI WORLD LIMITED acts as its processor under the CalRound Data Processing Addendum. In that situation, requests about the content should usually be made to the organisation first.

Account and authentication data. Name, email address, profile, account identifiers, sign-in records and authentication data handled by our identity service. We do not see your password.

Billing and transaction data. Plan, subscription, invoice, payment status and transaction metadata. Stripe processes payment-card details; CalRound does not receive or store your full card number.

Customer content. Uploaded schedules and files, calendars, events, dates, locations, notes, settings and attachments, including personal data contained in them.

Collaboration data. Workspace membership, collaborator details, invitations, roles and related activity needed to manage access.

Recipient alerts. Optional recipient email addresses, the calendar they relate to, consent or subscription status and unsubscribe records.

Communications and technical data. Support messages, feedback, service emails, IP address, device/browser information, security and diagnostic logs, and aggregate usage counts such as public views and add-to-calendar actions.

Business and prospect contact data. Where CalRound's restricted internal prospecting feature is used, business names, roles, professional contact details and supporting source information from public business websites may be recorded for business-to-business relationship and outreach purposes.

We process data where necessary to perform our contract: creating accounts, extracting and managing events, hosting files, supporting collaboration, publishing calendars, supplying feeds and QR codes, providing support and administering subscriptions.

We rely on legitimate interests to secure and improve the service, diagnose faults, prevent fraud and abuse, understand aggregate use, administer our business, and establish relevant business-to-business relationships and prospecting. We balance those interests against people's rights and provide a right to object where it applies. We process data where needed to comply with legal obligations, including tax, accounting and lawful requests. We rely on consent for optional recipient email alerts and wherever consent is otherwise required; consent can be withdrawn without affecting earlier lawful processing.

Uploaded schedule content may be sent through the Lovable AI Gateway to a model provider, currently Google Gemini, solely to extract proposed event data. Automated output may be inaccurate and organisers must review it before publishing. CalRound does not use AI to make legal or similarly significant decisions about people.

We use Lovable Cloud for application hosting, managed cloud services, email delivery and the AI gateway; Supabase for the underlying database, authentication and file storage; Google for Gemini model processing and Maps place/address suggestions; Stripe for payments and billing; and email delivery infrastructure for service and opted-in alert emails. They process data only as necessary for their services and legal role. Stripe may act as an independent controller for parts of payment and fraud processing. See our public Subprocessors page for current material providers.

We may also disclose information where required by law, to protect rights and security, in connection with a corporate transaction subject to appropriate safeguards, or with your direction. We do not sell personal data or use it for advertising.

Some providers may process data outside the UK. Where a transfer is restricted, we use the lawful mechanism applicable to the provider arrangement, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another safeguard permitted by law. You may contact [email protected] for information about the safeguard relevant to your data.

Published event data and attachments are intentionally available to anyone with the public link or QR code. A recipient may forward or copy them, and previously subscribed data may remain in third-party calendar apps. Users must not publish personal, confidential or other data they are not entitled to make public.

We keep account and customer data while the service is used and afterwards only as needed for contractual, legal, dispute, fraud-prevention and security purposes. Billing and transaction records are retained as required for legal, tax and accounting obligations. Retention depends on the data's nature, purpose, sensitivity, risk and applicable requirements rather than one universal deadline.

We delete account and content data following a valid request, subject to legal retention and limited, access-restricted backups that expire through normal cycles. Organisation content is not deleted merely because an individual member leaves or deletes their personal account; the organisation controls that data.

Depending on the circumstances, you may ask for access to, correction of, deletion of or restriction of your personal data; receive certain data in a portable format; object to processing based on legitimate interests or direct marketing; withdraw consent; and ask for safeguards used for restricted transfers. You also have rights relating to solely automated decisions with legal or similarly significant effects, although CalRound does not use such decision-making for account holders or recipients.

Email [email protected] to exercise a right. We may need to verify your identity and may direct requests about organisation-controlled content to that organisation. You may complain to the UK Information Commissioner's Office at ico.org.uk. We would appreciate the opportunity to address your concern first.

CalRound itself currently uses only essential authentication and session storage needed to keep users signed in and secure the service. It does not use advertising or behavioural tracking cookies. If non-essential cookies or similar technologies are added later, consent will be obtained where required.

CalRound accounts are for adults and authorised organisational users and are not intended for children to create. Organisations are responsible for ensuring that any children's data they choose to upload or publish is necessary, lawfully handled and protected with appropriate safeguards. Unnecessary children's data should not be uploaded.

We use proportionate technical and organisational safeguards, including access controls, private storage, separation between accounts and workspaces, encrypted transport and monitoring. Access within an organisation follows assigned roles. No online service can guarantee absolute security, and we do not claim unverified security certifications.

Privacy questions and requests: [email protected]. General legal contact: [email protected]. You may also write to SEVI WORLD LIMITED at 18 Park Street, London, W1K 2HZ, United Kingdom.