Privacy Policy

The controller responsible for your personal data is:

• FX Media AS (Calendify)
• Organisation number: 930 724 548
• Address: Ringlevegen 4, 7655 Verdal, Norway
• Contact: info@fx-media.no

Depending on how you use Calendify, we process the following categories of data:

• Account data (hosts): name, email address, password (hashed), company/brand details, time zone, profile and logo images.
• Booking data (guests): name, email address, time zone, the selected time slot, any message or answers to custom questions, and an optional reference code.
• Payment data: for paid bookings, the amount, currency, payment method and transaction status. Payments are handled by Vipps MobilePay — we do not receive or store full card or bank credentials.
• Calendar data (optional): if you connect Google Calendar, we read free/busy information and create events on your behalf.
• Technical data: IP address, device/browser information and log data needed to operate and secure the service.
• Cookies: a small number of essential cookies (see section 8).

We process personal data on the following legal bases (Art. 6 GDPR):

• Performance of a contract: to create and manage accounts, generate available time slots, process bookings, take payments and send booking confirmations, reminders and changes.
• Legitimate interests: to secure, maintain and improve the service, prevent abuse and fraud, and provide support.
• Legal obligation: to keep records required by law (e.g. for tax and accounting in respect of payments).
• Consent: where required, for example when you connect optional third-party integrations such as Google Calendar.

Paid bookings are processed by Vipps MobilePay, which acts as an independent payment service provider and, in respect of the payment itself, as a separate data controller. When you pay, you interact with Vipps, and your payment is governed by Vipps' own terms and privacy policy.

We receive confirmation of the transaction (such as status, amount and an order reference) so we can confirm your booking and, where applicable, prepare an invoice. We do not store your card number, bank details or Vipps credentials. Please review Vipps' privacy policy for how they handle your data.

We do not sell your personal data. We share data only with service providers (sub-processors) that help us run Calendify, under appropriate data-processing agreements:

• Supabase — Database, authentication and file storage (European Union). Privacy policy
• Vercel — Application hosting and content delivery (European Union / United States). Privacy policy
• Resend — Transactional email delivery (confirmations, reminders) (European Union / United States). Privacy policy
• Vipps MobilePay — Payment processing for paid bookings (European Union / Norway). Privacy policy
• Google — Optional two-way calendar sync and Google Meet links (European Union / United States). Privacy policy

Where a host uses Calendify to take bookings, the host is a separate controller for the booking data they receive and is responsible for their own use of that data.

We aim to keep data within the European Economic Area. Where a sub-processor processes data outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

We keep personal data only for as long as necessary: account data while your account is active; booking data for as long as needed to provide the service and to comply with legal obligations; and payment/transaction records for the periods required by applicable tax and accounting law. When data is no longer needed, we delete or anonymise it.

Calendify uses only essential cookies needed to run the service — for example to keep you signed in and to remember your language preference (NEXT_LOCALE). We do not use advertising or cross-site tracking cookies.

Under the GDPR you have the right to access, rectify, erase, restrict or object to processing, data portability, and to withdraw consent. To exercise any of these rights, contact info@fx-media.no. You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) or your local supervisory authority.

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, hashed passwords, access controls and row-level security on our database. No method is completely secure, but we work to protect your data and to respond promptly to any incident.

Calendify is not directed at children under 16, and we do not knowingly collect their personal data.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

Questions about this policy or your data? Email info@fx-media.no or write to FX Media AS, Ringlevegen 4, 7655 Verdal, Norway.