Calendly is a scheduling SaaS product operated by Calendly, LLC, founded by Tope Awotona in 2013 and still privately held with no public ownership-chain disclosure found in its own pages. Its privacy notice discloses broad automatically-collected categories (identifiers, commercial information, geolocation, professional/employment-related data) and states that when a Calendly customer uses the product to book a meeting with a third party, Calendly acts only as a processor on behalf of that customer, who remains the data controller for the invitee's information. The same notice lists Google Analytics, Clearbit, Facebook Pixel, and MNTN (TV-ad retargeting) as third-party trackers on its web properties and self-declares, under CCPA, that it has "sold or shared" identifiers and network-activity data with targeted-advertising and analytics partners. Its iOS App Store privacy label shows Contact Info, Identifiers, User ID, and Usage Data linked to identity for analytics/app-functionality purposes, with no separate "Data Used to Track You" category declared. Calendly's security page lists SOC 2 Type 2, SOC 3, ISO/IEC 27001, and CSA STAR Level One attestations, but no named audit firm and no incident, breach, or regulator action was found in the sources checked.
TIMELINE
NO ENTRIES ON FILE YET.
TOOLS WE RECOMMEND
PLUS
RECEIPTS
15 ON FILE
COLLECTION
Calendly's iOS App Store privacy label discloses that Contact Info (email address), Identifiers, User ID, and Usage Data (product interaction) are collected and linked to the user's identity, used for Analytics and App Functionality purposes.
As assessed by PrivacySpy on 2020-12-11 (see PrivacySpy's rubric entry for this product for the per-claim citation): Does the service collect personal data from third parties? — Yes.
Calendly's privacy notice states that when a Calendly customer uses the Services to schedule a meeting with a third party (an invitee) or to record a meeting, Calendly acts only as a processor/service provider on behalf of that customer, who remains the data controller for the invitee's personal data, under Calendly's Data Processing Addendum and Customer Terms and Conditions.
Calendly's iOS App Store listing names the operating legal entity as "Calendly, LLC" in its Information/Seller field, consistent with the "Calendly, LLC" entity named elsewhere in Calendly's own legal pages; no SEC filing (Form D or otherwise) or investor disclosure was found for the company.
As assessed by PrivacySpy on 2020-12-11 (see PrivacySpy's rubric entry for this product for the per-claim citation): Will affected users be notified when the policy is meaningfully changed? — No.
As assessed by PrivacySpy on 2020-12-11 (see PrivacySpy's rubric entry for this product for the per-claim citation): Does the policy allow personally-targeted or behavioral marketing? — Yes, but you may opt-out.
Calendly's privacy notice's CCPA disclosure table self-declares that in the preceding 12 months, Calendly has sold or shared identifiers and internet/network-activity data with its targeted-advertising and analytics partners.
Calendly's security page lists SOC 2 Type 2, SOC 3, ISO/IEC 27001, and CSA STAR Level One attestations among its maintained compliance artifacts, without naming an independent audit firm or linking a public report; no breach, FTC/state-AG action, or lawsuit was found in the sources checked.
Calendly's iOS App Store privacy label shows only Diagnostics (Crash Data, Performance Data) as data collected but not linked to identity, used for Analytics and App Functionality, and does not declare a separate "Data Used to Track You" category for the app.
Calendly's privacy notice lists Google Analytics, Clearbit, Facebook Pixel, and MNTN as third-party tools used on its Website, describing MNTN specifically as a TV-advertising opt-out service, each with a separate opt-out link provided.