Privacy Policy

CalenDeus is a self-hosted WordPress plugin. It runs entirely on your own WordPress installation. We do not operate any central server that stores booking data from our customers' websites. Appointment data entered by your visitors stays on your server.

When you visit this website (calendeus.com), we may collect:

• Usage analytics: pages visited, referrer URL, browser type, and approximate geographic region. This data is collected in aggregate and is not linked to individuals.
• Support form submissions: if you submit a message through our support page, we collect your name, email address, and the content of your message. This is used solely to respond to your enquiry.
• Purchase information: when you purchase a Pro licence, payment is processed by Stripe. We store your email address, the order record (amount, currency, tax, Stripe order references, receipt link) and the licence key issued to you, so we can deliver the licence, provide downloads and handle support or refunds. We never see or store your payment card details.
• Account sign-in: signing in to your account is passwordless. We store your email address and a short-lived, single-use sign-in token, and we set a signed session cookie in your browser once you are signed in.
• Licence activations: if you install the Pro plugin, we store the site URL it is activated on, the plugin version it reports, and the time it last checked in.

When your website visitors use the booking form, the following information may be stored in your WordPress database:

• First name, last name
• Email address
• Gender: shown and required on the default form; it can be hidden or made optional with the Pro form builder
• Appointment date and time
• The service booked, its price, and the booking status
• Booking notes
• Consent: a yes/no flag recorded with the booking's submission timestamp. The consent checkbox is always shown and always required.
• Phone number: the bookings table has a phone column, but the current release never writes a phone number submitted through the booking form; it stays empty for bookings the plugin takes itself

You are the data controller for this information. As a WordPress site operator, you are responsible for informing your visitors about the data you collect, your legal basis for processing it, and providing mechanisms to exercise their rights (access, deletion, portability) under applicable privacy laws such as GDPR.

Stripe

Payments are processed by Stripe, our payment processor. When you buy a Pro licence you are taken to a Stripe-hosted checkout page, where Stripe collects your email address, billing address, any VAT/tax ID you provide, and your payment details. Card details never touch our servers. Stripe's handling of that data is governed by the Stripe Privacy Policy. Licence management, downloads and updates are handled by us on calendeus.com.

Licence Validation & Updates (Pro plugin)

The Pro plugin talks to calendeus.com to keep your licence and your copy of the plugin up to date. When it activates, deactivates, re-checks a licence, or looks for an update, it sends us your licence key, the URL of the site it is installed on, and the plugin version. We use this only to confirm the licence is valid, enforce the one-site-per-licence limit, and serve the correct update package. No booking data, customer data, or WordPress content is ever sent to us. The free version of the plugin makes no calls to our servers.

Google Calendar API

If you (as a site owner) configure Google Calendar sync, the plugin communicates with Google's API using credentials you provide. Google's data practices are governed by the Google Privacy Policy. CalenDeus requests a single OAuth scope, https://www.googleapis.com/auth/calendar, which grants read and write access to the calendars on the Google account you connect.

CalDAV Providers

If you configure CalDAV sync (Outlook, iCloud, Nextcloud, etc.), CalenDeus communicates with the URL you provide using the credentials you supply. We have no visibility into this connection.

This website uses minimal cookies for session management and analytics. We do not use advertising or tracking cookies. We do not use cookie-based remarketing.

The CalenDeus plugin itself does not set cookies on your visitors' browsers.

Support enquiries submitted via our contact form are retained for up to 24 months and then deleted, unless a longer retention period is required by applicable law.

Purchase records are retained as long as your licence is active and for up to 7 years thereafter for accounting and legal compliance.

For data stored on your WordPress installation, retention is at your discretion and subject to your own privacy policy obligations.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict certain processing
• Data portability

To exercise any of these rights, contact us via our support page.

We take reasonable technical and organisational measures to protect information we hold. However, no internet transmission is completely secure. We recommend that you also ensure your WordPress installation is kept up to date and secured appropriately.

CalenDeus and this website are not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has submitted data to us, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

If you have questions or concerns about this Privacy Policy or how we handle data, please reach out via our support page.