Privacy Policy

Caly ("us", "we", or "our") operates the trycaly.com website and the Caly scheduling application (collectively, the "Service"). This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service, and the choices you have associated with that data.

We use your data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this policy.

Definitions

Personal Data means data about a living individual who can be identified from that data or from that data and other information in our possession.

Usage Data is data collected automatically, generated by use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).

Cookies are small files stored on your device (computer or mobile device).

Data Controller means the person who (alone or with others) determines the purposes for which personal data are processed. For this Privacy Policy, we are a Data Controller of your data.

Information Collection and Use

We collect several types of information for various purposes to provide and improve our Service to you.

Personal Data

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. This may include, but is not limited to:

• Email address
• First name and last name
• Phone number
• Time zone and locale settings
• Calendar connection data (availability, event titles where authorised)
• Cookies and Usage Data

Usage Data

We may also collect information your browser sends whenever you visit our Service or when you access the Service via a mobile device ("Usage Data"). This may include information such as your device's IP address, browser type, browser version, the pages of our Service you visit, the time and date of your visit, time spent on those pages, unique device identifiers, and other diagnostic data.

Tracking and Cookies Data

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, some parts of our Service may not function properly.

Examples of cookies we use:

• Session Cookies — to operate our Service.
• Preference Cookies — to remember your preferences and settings.
• Security Cookies — for security purposes.

Use of Data

Caly uses the collected data for various purposes:

• To provide and maintain our Service
• To notify you about changes to our Service
• To allow you to participate in interactive features of our Service
• To provide customer support
• To gather analysis or valuable information so that we can improve our Service
• To monitor the usage of our Service
• To detect, prevent, and address technical issues
• To send you newsletters, marketing, or promotional materials — only if you have opted in. You may opt out at any time by following the unsubscribe link in any email or by contacting us at hello@devino.ca.

Retention of Data

We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our agreements and policies.

Usage Data is generally retained for a shorter period, except when it is used to strengthen security or improve functionality, or when we are legally required to retain it longer.

Transfer of Data

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction.

We will take all steps reasonably necessary to ensure your data is treated securely and in accordance with this Privacy Policy, and no transfer of your Personal Data will take place to an organisation unless adequate controls are in place.

Disclosure of Data

We may disclose your Personal Data in the good faith belief that such action is necessary to:

• Comply with a legal obligation
• Protect and defend the rights or property of Caly
• Prevent or investigate possible wrongdoing in connection with the Service
• Protect the personal safety of users of the Service or the public
• Protect against legal liability

Security of Data

The security of your data is important to us. All data is transmitted over encrypted connections (TLS). However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially reasonable means to protect your Personal Data, we cannot guarantee its absolute security.

Service Providers

We may employ third-party companies and individuals ("Service Providers") to facilitate our Service, provide the Service on our behalf, perform Service-related tasks, or assist us in analysing how our Service is used. These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Analytics

We may use third-party Service Providers to monitor and analyse the use of our Service. Analytics data is used in aggregate and is not used to identify you individually.

Payments

We may provide paid products and/or services within the Service. In that case, we use third-party payment processors. We do not store or collect your payment card details. That information is provided directly to the payment processor whose use of your personal information is governed by their own privacy policy. Payment processors we work with adhere to the standards set by PCI-DSS.

Zoom Integration

If you connect your Zoom account to Caly, Zoom issues Caly an access token and a refresh token for your account. Caly stores these tokens, which identify your Zoom user, together with the ids of the Zoom meetings it creates for your bookings. Caly uses them only to create, update and delete Zoom meetings for bookings made through Caly, sending Zoom the booking title, start time, duration, time zone and description. Caly does not access your recordings, chats, contacts or other meetings, and does not sell Zoom data or use it for advertising.

When you remove Zoom from Caly, Caly revokes its access at Zoom and deletes the stored tokens. When you remove Caly from your Zoom account, Zoom notifies Caly and the tokens are deleted on receipt of that notice. Deleting your Caly account deletes them as well. See Using Zoom with Caly for details.

Shopify App (Caly Consult)

Caly Consult is our Shopify app. It adds a "Book a consult" button to a store's product pages that opens the merchant's Caly booking page. When a merchant installs it, Caly Consult stores the shop's domain, the Shopify session records that let the app act for that shop (the access and refresh tokens Shopify issues and the permissions granted), and the Caly booking link the merchant saves. For any product the merchant gives its own link, it also stores that product's Shopify id and title with the link. The app asks Shopify for permission to read products only, to power the product picker.

Caly Consult does not store Shopify customer or order data. When a shopper who is logged in to the store clicks the button, the button's own script passes the shopper's name and email, with the product name and link, to the Caly booking page in the shopper's browser to prefill the booking form. This goes straight to the Caly booking page and is not sent to or stored by the Caly Consult app. Bookings made this way live in the merchant's Caly account and are handled as described in the rest of this policy.

When a merchant uninstalls Caly Consult, Shopify notifies the app and it deletes the shop's stored sessions, booking link and product links. Shopify's shop/redact request deletes the same data. Shopify's customers/data_request and customers/redact requests are answered by recording that the app stores no customer data. The app verifies Shopify's signature on every one of these requests before acting on it.

Your Data Rights

You have certain rights regarding the personal data we hold about you. You may contact us at any time to:

• Access — request a copy of the personal data we hold about you.
• Rectify — ask us to correct inaccurate or incomplete data.
• Delete — ask us to delete your personal data from our records.
• Restrict processing — ask us to limit how we use your data.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent — where we rely on consent to process your data, you may withdraw that consent at any time.

To exercise any of these rights, please contact us at hello@devino.ca. We may ask you to verify your identity before responding to such requests. We aim to respond within 30 days.

Children's Privacy

Our Service is not directed at anyone under the age of 18. We do not knowingly collect personally identifiable information from anyone under 18. If you become aware that a child has provided us with Personal Data, please contact us at hello@devino.ca. If we become aware that we have collected Personal Data from a child without parental consent, we take steps to remove that information from our systems.

Links to Other Sites

Our Service may contain links to other websites that are not operated by us. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the effective date at the top. We will also notify you via email prior to the change becoming effective.

You are advised to review this Privacy Policy periodically. Changes are effective when posted on this page.

Contact Us

If you have any questions about this Privacy Policy, please contact us by email: hello@devino.ca.