Lucera Consultancy FZCO, IFZA Business Park, Dubai, United Arab Emirates
Email: info@luceraconsulting.ae
As the controller is established outside the European Union, an EU representative has been designated. For all questions regarding the processing of your data, you may also contact the representative:
The designation is currently being finalized; the name and address of the representative will be published here without delay once completed. Until then, you can reach us directly using the contact details in Section 1.
Connecting to Google Calendar is voluntary. You establish it yourself in the settings and can disconnect it there at any time. Without your explicit consent, we do not access any Google account.
Which permission we request. BizCal is a calendar application: you view and manage your appointments in it. For this purpose we request the scope https://www.googleapis.com/auth/calendar. It allows us to read, create, modify, and delete calendars and events in your Google account.
What we use it for — exhaustively:
What we do not use it for. We do not analyze your calendar data, do not create profiles, do not use it for advertising, and do not disclose it to third parties. We do not sell data. People on our side do not see your calendar contents; access is carried out solely in an automated manner by the application — except in narrowly limited cases where you expressly ask us to for troubleshooting purposes, and legal obligations.
Storage. We store the access tokens (access and refresh tokens) on our servers in the European Union in order to maintain the connection. We retain appointment content from your Google calendar only for as long as is necessary for display and synchronization. If you disconnect the link or delete your BizCal account, the tokens are deleted without delay and access ends.
Revocation. You can end the connection at any time — in BizCal under Settings → Connect calendar → Disconnect or independently of that in your Google account at myaccount.google.com/permissions.
Limited Use. BizCal's use and transfer of information received from Google APIs is subject to the Google API Services User Data Policy, including the Limited Use requirements.
BizCal' use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Which data. Through the Google Calendar connection, BizCal processes only Google Calendar data, requested via the scope https://www.googleapis.com/auth/calendar: the events of the calendars you select, and your account e-mail address for identification. No other Google data is requested or processed.
Purpose. This data is used exclusively to show your existing appointments as busy times, to write BizCal appointments into your Google calendar, and to keep both calendars in sync — for no other purpose.
Storage & security. OAuth tokens are stored encrypted on our servers in the European Union (Germany) and are used only to perform the calendar sync you requested. All data is transmitted via TLS.
Sharing. Google user data is not sold, not used for advertising, not shared with third parties except where necessary to provide the feature (e.g. hosting), and not used to train AI models.
Limited Use. BizCal's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Revocation & deletion. You can disconnect Google at any time in the app settings (the tokens are then deleted) and revoke access at myaccount.google.com/permissions. Deleting your BizCal account deletes all stored Google data.
The same applies to Microsoft as described above for Google: voluntary linking, storage of access tokens, synchronization of your appointments, can be disconnected at any time, no analysis, and no disclosure.
We process the data for scheduling and managing appointments, for reminding you of appointments, and for providing the calendar functions (Art. 6(1)(b) GDPR — contract or pre-contractual measures) and for the secure, reliable provision of the service (Art. 6(1)(f) GDPR — legitimate interest). The linking with Google or Microsoft takes place only at your initiative (Art. 6(1)(a) GDPR — consent, revocable at any time by disconnecting the link).
Appointment data is visible to the persons involved (e.g. the advisor and agent of an appointment) as well as — depending on team settings — authorized managers of the respective team. Private appointments are visible only to you; others see at most "Busy". Data is not disclosed to third parties, except to Microsoft if you actively connect the calendar link.
The application and the appointment data are operated on servers in the European Union (hosting in Germany; database with Supabase in the EU region Frankfurt).
Transfer to third countries: The controller is established in the United Arab Emirates, for which no adequacy decision of the European Commission exists. To the extent that personal data is transferred there in connection with the administration of the service, this takes place on the basis of the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR). You may request a copy of the safeguards via the contact details given in Section 1.
If you connect a Google or Microsoft calendar, these providers process your data under their own responsibility, potentially also in third countries; their respective privacy notices apply.
Appointment data remains stored for as long as it is needed for the team's appointment management and evaluations. You can delete your data yourself at any time (see Section 9).
You can delete your account yourself at any time: in the app under Settings › Profile › Delete account ("Konto löschen") or without the app at biz-cal.app/konto-loeschen (sign in with e-mail address and password; if you sign in through your company, you confirm with a code sent by e-mail). Deletion takes effect immediately and cannot be undone.
What is deleted: your account and sign-in, your private appointments, your own tasks and lists, focus times, home time zone and all personal settings, push notifications (device identifiers), and any Google or Microsoft connection including the stored tokens. A team you created yourself and in which you are the only member is deleted with all its appointments, contacts and tasks; Spaces in which you are alone are deleted as well – you leave all other Spaces.
What is kept: if you belong to a company team or to another person's team, only your membership ends. That team's appointments and your entry in its structure remain there – they belong to the team or company (which is the controller in that respect). If you created a team with other members, please hand over the lead or remove the other members first. As proof, we only store the time and the number of deleted entries, without any personal content.
Deleting contacts: you delete your customers' contacts in the appointment sheet via the three-dot menu ("Kontakt löschen"). Phone number and e-mail address are removed; the appointment itself remains with the name. Questions: termine@biz-cal.app.
You have the right to access, rectification, erasure, restriction of processing, data portability, and objection (Art. 15–21 GDPR — data subject rights). You may also lodge a complaint with a data protection supervisory authority. For any concerns, please contact info@luceraconsulting.ae.
You also have the right to lodge a complaint with a data protection supervisory authority — for example with the authority of your habitual residence (Art. 77 GDPR).
BizCal does not use advertising or tracking services and does not sell data. Only technically necessary storage in the browser is used (e.g. your design setting).
This is a translation. In case of discrepancies, the German version prevails.