ScholarCal logoScholarCal

Privacy Policy

Last updated: February 27, 2026

1. Information We Collect

We collect the following categories of information:

  • Account information — email address, name, and profile picture provided by your OAuth provider (Google, Microsoft).
  • Calendar data — events, assignments, and calendar metadata imported from connected sources (Google Calendar, Microsoft 365, Canvas LMS, iCal feeds).
  • Usage data — feature usage, AI assistant conversations, and interaction patterns to improve the Service.
  • Integration tokens — OAuth access and refresh tokens for connected services, stored encrypted per-user.

2. How We Use Your Data

  • Display your calendar events in a unified view
  • Power the AI scheduling assistant
  • Sync events between connected calendar providers
  • Send reminders and notifications you configure
  • Improve service reliability and features

3. Data Storage and Security

All data is stored in Supabase with row-level security (RLS) enforcement. Data is encrypted in transit (TLS) and at rest. OAuth tokens are stored per-user and are never shared between accounts.

4. Third-Party Processors

We use the following third-party services:

  • Supabase — database, auth, and edge functions
  • OpenAI — AI scheduling assistant (conversation data sent for processing)
  • Twilio — SMS reminders (phone number and message content)

5. Data Retention and Deletion

Your data is retained as long as your account is active. When you disconnect an integration, associated tokens and sync state are deleted immediately. When you delete your account, all data is permanently removed within 30 days.

6. Your Rights

You have the right to:

  • Access your data via the API or Settings export
  • Correct inaccurate information
  • Delete your account and all associated data
  • Disconnect any integration at any time
  • Export your events via iCal feed

7. Education Data (FERPA)

When used with Canvas LMS, ScholarCal reads assignment and calendar data in read-only mode. We do not write to or modify any LMS data. Canvas data is treated with the same security and retention policies as all other user data.

8. Changes to This Policy

We will notify you of material changes via email or in-app notification. The "last updated" date at the top of this page reflects the most recent revision.

9. Contact

Privacy questions? Contact us at privacy@scholarcal.com.