Privacy policy
Last updated 9 October 2026
CushyCal is operated by Everburn Studio Ltd, a company registered in England and Wales (company number 17511259), registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. This policy explains what we collect, why, and your choices. It covers hosts (people with a CushyCal account) and clients (people who book time with a host). Contact us at privacy@cushycal.com.
If you book with a host
When you book, we collect your name, email, time zone, any phone number and answers you give, and the booking itself. The host decides what their form asks and is responsible for how they use your details (they are the controller; we process the data for them). We use it to confirm, remind you about, reschedule and cancel the booking, and to process any payment. To exercise your rights, contact the host — or us, and we'll pass your request on.
If you have an account
| What | Why |
|---|---|
| Name, email, username, time zone, profile and settings | To run your account and booking pages (contract) |
| Calendar data from Google or Microsoft, if you connect them | To hide times you're busy and add bookings to your calendar (contract) |
| Billing details (handled by Stripe; we keep your plan and invoice status, not your card) | To charge for paid plans and meet tax and accounting duties (contract, legal obligation) |
| Where you first came from (referring site, campaign tags or the page you landed on) | To understand which channels bring sign-ups (legitimate interest) |
| Security logs and an audit trail of account and booking changes | To keep the service safe and resolve disputes (legitimate interest) |
| Tips and setup reminders by email | To help you get set up (legitimate interest). Unsubscribe with the link in any of these emails. |
Google and Microsoft calendar data
If you connect a calendar, we read event times and free/busy information from the calendars you choose, and create, update and delete only the events for bookings made through CushyCal. We don't read event descriptions or attendees of your other events beyond what's needed to know you're busy, and we never sell calendar data, use it for advertising, or use it to train AI models. People at CushyCal can't see it except with your permission for support, for security, or to comply with the law.
CushyCal's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Disconnecting a calendar deletes the stored access tokens and synced events.
Who we share data with
Only service providers that help us run CushyCal, under contract and only for that purpose: hosting and database, Stripe (payments), our email provider (Resend), Twilio (text and WhatsApp messages), Google and Microsoft (calendars you connect), and error monitoring. The current list is in our data processing terms. We share data when the law requires it. We never sell personal data.
Support access
To solve a problem you report, our support staff may view your account read-only for a limited time. Every such view is logged and you're emailed when it happens.
How long we keep data
Account data is kept while your account exists. When you delete your account we delete your profile, session types, availability, calendar connections and clients' personal data within 30 days, and backups roll over within a further 30 days. We keep invoices and payment records as long as tax law requires.
Your rights
You can access, correct, export and delete your data — most of it directly in Settings (“Download my data”, “Delete account”). You can also object to or restrict some uses, and complain to your data protection authority. Email privacy@cushycal.com and we'll respond within 30 days.
Security and transfers
Data is encrypted in transit; calendar tokens are also encrypted at rest. Our providers may process data in other countries; where required we use safeguards such as standard contractual clauses.
Cookies
We use only cookies needed to run the service, plus one that remembers where you first came from. See the cookie policy.
Children
CushyCal isn't for children under 16, and hosts must not use it to collect children's data without the consent the law requires.