Cal.com

Calendar AI agent and in-product assistants (opt-in) Data: Event titles, times, attendee names/emails and your instructions; API logs kept up to 30 days; no model training on customer data

AI meeting notes (transcript summaries), calendar AI agent (fallback model), event cover-image generation Data: Transcript text (may include names and meeting content); no meeting titles, dates, attendee records, or links. Zero Data Retention agreed with OpenAI; no model training on customer data.

Database, object storage for uploads and Cal Video recordings, backups Data: All product data: account, booking, billing and support records; uploaded images and media; Cal Video recordings and transcripts

DNS, CDN, bot protection (Turnstile), WAF; R2 storage for uploads, avatars and cal.video recordings; email routing metadata; may be used as an alternative email transport Data: Uploaded images and media; call recordings and transcripts (configuration-dependent); when used for email: sender/recipient names and addresses, subject and body, calendar invite details

Error monitoring and performance metrics Data: Internal user and organization IDs, error messages and stack traces, request URL, browser and OS type (no names, email addresses or IP addresses)

Subscriptions, checkout, invoices, and customer-collected booking payments Data: Email, billing name and address, card details entered on Stripe's own checkout (PCI-DSS certified; card numbers never reach Cal.com servers), subscription metadata

Internal support and incident communication; booking notifications to users who connect the Cal.com Slack bot Data: Customer details pasted into support/alert channels

Service emails sent by Cal.com staff: changelog, policy and legal notices, subprocessor notices Data: Account-owner name and email; delivery and open logs