Last updated: July 8, 2026
PRIVACY NOTICE
This privacy notice for Culture Software Inc. (“Company,” “Calented,” “we,” “us,” or “our”) describes how and why we might collect, store, use, and/or share (“process”) your information when you use our services (“Services”), such as when you:
Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us via our help portal.
This summary provides key points from our privacy notice. You can find more detail on any topic in the section referenced below, or by using the table of contents to find the section you are looking for.
What personal information do we collect? When you use our Services, we collect the information you provide (such as your name and email address), information generated as you create polls and events, guest RSVP information, and — if you choose to connect a Google Calendar — your calendar availability data. See “1. What information do we collect?”
Do we collect any information from third parties? If you connect your Google Calendar, we receive calendar and availability data from Google’s Calendar API with your authorization. See “1. What information do we collect?” and “9. Google Calendar data and Limited Use.”
Why do we collect personal information? We process your information to provide, improve, and administer our Services (including scheduling polls, events, and calendar availability), to send you transactional email about your polls and events, for security and fraud prevention, and to comply with law. See “2. Why do we use personal information?”
In what situations and with which parties do we share personal information? We share information with the service providers that operate our Services (such as our hosting/authentication provider, our email delivery provider, and our calendar provider). See “3. When and with whom do we share your personal information?”
How do we keep your information safe? We have organizational and technical processes in place designed to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure. See “5. How do we protect personal information?”
What are your rights? Depending on where you are located, applicable privacy law may mean you have certain rights regarding your personal information — including the right to delete your account and data yourself. See “8. Your choices,” “11. Do California residents have specific privacy rights?” and “14. How can you review, update, or delete the data we collect from you?”
How can you exercise your rights? You can delete your account and its data at any time from your profile page (see “7. Managing your account and deleting your data”), or contact us via our help portal.
In Short: We collect personal information that you provide to us.
We collect personal information that you voluntarily provide to us when you register on the Services, create or respond to a poll, create or RSVP to an event, express an interest in obtaining information about us or our Services, or otherwise contact us.
Personal information provided by you. The personal information we collect may include the following:
Guest RSVP information. When you RSVP to an event as a guest without an account, we collect the name you enter and, if you provide it, an optional email address. We also generate an edit token so you can update your own RSVP later. We do not require a guest to create an account to RSVP.
All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.
In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you use our Services.
We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, and information about how and when you use our Services. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.
We collect this information through cookies and similar technologies used to keep you signed in. See “10. Cookies and sessions.”
In Short: We use personal information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.
We use personal information for a variety of reasons, including to:
We may create and use de-identified or aggregated data (which does not identify you) to analyze and improve our Services.
In Short: We share information with the third-party service providers that operate our Services.
We share personal information with third-party service providers who perform services for us or on our behalf and require access to such information to do that work. We have contracts in place with these providers designed to safeguard your personal information; they may not use or share it except to provide services to us. The categories of service providers we rely on include:
We also may need to share your personal information in the following situations:
In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by law.
We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). For most information, this means for as long as you maintain an account with us. When you delete your account (see “7. Managing your account and deleting your data”), we remove your personal information from our active systems as described in that section. Some records, such as operational logs recording that a message was sent, may be retained in de-identified form.
In Short: We aim to protect your personal information through a system of organizational and technical security measures.
We have implemented technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.
In Short: We do not knowingly collect data from or market to children under 18 years of age.
We do not knowingly solicit data from or market to children under 18 years of age. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us via our help portal.
You can review or change the information in your account, or delete your account, at any time.
Delete your account yourself. From your profile page, you can permanently delete your account. When you delete your account, we:
Deletion is immediate and permanent. Events that other people host and that you merely attended are not deleted — only your own RSVP to them is removed. Some operational log records are retained in de-identified form (with your identifiers removed) as a legitimate business record.
You may also contact us via our help portal if you would like help exercising this right.
Opt out of marketing communications. Calented’s core emails are transactional — invitations, updates, and cancellations about polls and events you are part of. You can stop event-related email by muting an event or by following the unsubscribe instructions included in the emails we send you. You may continue to receive service-related messages necessary to operate your account.
Cookies. Most browsers let you remove or reject cookies through your browser settings. Because our sign-in sessions rely on cookies, blocking them may prevent you from staying signed in or using parts of the Services. See “10. Cookies and sessions.”
If you have questions or comments about your privacy rights, you may reach out to us via our help portal.
Connecting a Google Calendar is optional and is used only to help schedule.
What we access. With your authorization through Google’s OAuth consent screen, we read your calendar availability (the busy/free times and event times on the calendars you connect) so the Services can suggest times and check availability. Where you direct, we may create events on your calendar. We store this availability data and store your Google refresh token so we can keep your availability up to date; the refresh token is held in a dedicated, access-controlled table.
Limited Use. Calented’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide and improve the scheduling features you request; we do not sell it, use it for advertising, or transfer it to others except as necessary to provide those features, comply with law, or as part of a merger or acquisition.
Revoking access. You can disconnect your calendar in the Services, delete your account (which revokes and deletes your Google tokens), or revoke Calented’s access at any time from your Google Account permissions page.
We use cookies and similar technologies to keep you signed in and to maintain the security and operation of the Services. Our authentication provider (Supabase) sets session cookies when you sign in. We do not use these cookies for cross-site advertising. You can block or delete cookies through your browser settings, but doing so may prevent you from staying signed in or using parts of the Services.
In Short: Yes, if you are a resident of California, you are granted specific rights regarding access to your personal information.
If you are under 18 years of age, reside in California, and have a registered account with the Services, you have the right to request removal of unwanted data that you publicly post on the Services. To request removal of such data, please contact us using the contact information provided below, and include the email address associated with your account and a statement that you reside in California. We will make sure the data is not publicly displayed on the Services, but please be aware that the data may not be completely or comprehensively removed from all our systems (e.g., backups).
The California Code of Regulations defines a “resident” as: (1) every individual who is in the State of California for other than a temporary or transitory purpose; and (2) every individual who is domiciled in the State of California who is outside the State of California for a temporary or transitory purpose. All other individuals are defined as “non-residents.” If this definition of “resident” applies to you, we must adhere to certain rights and obligations regarding your personal information.
What categories of personal information do we collect? In the past twelve (12) months we have collected the following categories:
We do not collect biometric information, and we do not collect payment or financial account information through the Services. We may also collect other personal information outside of these categories where you interact with us in person, online, or by email in the context of receiving help through our support channels or facilitating delivery of our Services.
How do we use and share your personal information? We use and share your personal information as described in this notice, through the service providers listed in “3. When and with whom do we share your personal information?”
Will your information be shared with anyone else? We may disclose your personal information with our service providers pursuant to a written contract between us and each service provider. We do not sell your personal information. Culture Software Inc. has not sold any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months.
Your rights with respect to your personal data
To exercise these rights, you can contact us via our help portal. If you have a complaint about how we handle your data, we would like to hear from you.
In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.
We may update this privacy notice from time to time. The updated version will be indicated by an updated “Last updated” date and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.
If you have questions or comments about this notice, you may reach out to us via our help portal.
Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, change that information, or delete it in some circumstances. You can review and update your information, and permanently delete your account and its data, from your profile page (see “7. Managing your account and deleting your data”). You can also contact us via our help portal.