Legal

Privacy Policy

For a plain-language explanation, see Privacy, security, and AI processing.

What we process

When you email add@tomycal.com, we process that message: its sender and recipient details, its subject and body, any forwarded content it contains, and any supported attachments. We process it for one purpose: to find event information and prepare a calendar invitation to send back to you.

We also keep a limited record of your sending address, your usage against your allowance, any preferences you have explicitly saved such as a default timezone, delivery outcomes, security and abuse signals, and billing records where you are a paying customer.

What we do not do

We do not connect to your mailbox or calendar. We do not request OAuth permission or your email password. We do not read email you have not sent to us. We do not sell personal information, and we do not use submitted content to train AI models.

How long content is kept

Event content is held only for as long as it takes to prepare and deliver your response, then removed from the durable product database. We keep the limited metadata described above for as long as needed to operate allowances, billing, security, and delivery, and to meet legal obligations.

Preparing your invitation means sending content to reviewed email and AI providers, which keep their own operational and abuse-monitoring records for a limited period under their own terms. ToMyCal cannot delete those on your behalf, and they are not used to train AI models.

Three different things are described above, and they are worth separating. Content we hold is deleted once your response is delivered. Records our providers hold are governed by their terms, not ours. Limited metadata about you, your usage, and your billing is kept deliberately.

Service providers

We use third-party providers to deliver the service: Resend for email sending and receiving, Vercel and Render for application hosting, Supabase for database and file storage, OpenAI for AI interpretation, and Stripe for payment processing. These providers process information on our behalf under contract and for no other purpose, and each is bound by its own published retention and security terms for the data it processes.

Email you receive from us

Responses to what you send are transactional and are part of the service. We may also occasionally email you about ToMyCal features and offers. You can unsubscribe from those at any time without affecting your ability to use the service or receive responses.

Your choices

You can stop using the service at any time by not sending email to it. You can ask us for a copy of the information we hold about you, ask us to correct it, or ask us to delete it. Because event content is not retained after your response is delivered, a deletion request concerns your address, preferences, usage, and billing records that we are not legally required to keep.

Children and school content

ToMyCal is not directed to children, and we do not knowingly collect personal information directly from anyone under 13. The service does process emails that may reference a child, such as a forwarded school newsletter, but only because an adult using ToMyCal chose to send or forward that email themselves. We do not accept email directly from children.

Contact

Privacy questions and requests can be sent to support@zirovm.com.