Privacy Policy
Last updated: August 25, 2026
1. Data Controller
The data controller responsible for personal data processed through the CalLink service (cal-link.com) is:
Veltis Studio (Nicolas DA CUNHA • CalLink)
Boulevard de l'Europe, 51420 Witry-lès-Reims, France
SIREN : 109 064 337 • RCS Reims
Privacy Contact: privacy@cal-link.com
2. Data Collected & Purposes
Data provided directly by you:
- Account & Authentication: Email address and securely hashed password (managed via Supabase Auth).
- Event & Branding Data: Title, description, date, time, location, brand logo, and brand color chosen for your events.
- Billing & Payment Data: Payment details are processed directly by Stripe (PCI-DSS Level 1 compliant). CalLink never sees or stores full credit card numbers.
RSVP Registration & Attendee Data:
When you enable the RSVP form on an event, CalLink allows attendees to register by submitting their first name, last name, and email address.
- Respective Roles (Art. 28 GDPR): The event organizer acts as the Data Controller. CalLink acts strictly as a technical Data Processor hosting attendee data on behalf of the organizer.
- Zero Commercial Exploitation: CalLink never sells, rents, shares, or uses attendee contact details for advertising or third-party marketing.
- Management & Deletion: Organizers can view, export to CSV (Business plan), and delete registrations anytime from their Contacts dashboard. Attendees may also request erasure at privacy@cal-link.com.
Click Intelligence & Engagement Data:
- Anonymized click metrics: When attendees view a public event page or click a calendar button, we only record the timestamp and selected provider (Google, Outlook, Apple...). This tracking is anonymized without third-party ad trackers.
3. Subprocessors & Data Localization (EU)
Serveurs et base de données hébergés exclusivement dans l'Union Européenne (Région Irlande, eu-west-1 / AWS). Chiffrement des données au repos (AES-256) et en transit (TLS 1.3).
Infrastructure de paiement européenne (Dublin, Irlande). Certifiée PCI-DSS Service Provider Niveau 1.
Réseau de distribution statique mondial conforme aux clauses contractuelles types (SCC) de l'Union Européenne.
4. Cookie Policy
CalLink does not use any advertising cookies, third-party profiling trackers, or invasive pixels.
The only cookies and local storage tokens used are strictly necessary for the technical operation of the service (secure login session and language preference). In accordance with GDPR and CNIL guidelines, these essential technical elements are exempt from prior consent banners.
5. Your GDPR Rights & Account Deletion
Under the General Data Protection Regulation (GDPR), you hold the following rights:
Right to access & rectification
Access and update your account details anytime in Settings.
Right to data portability
Export your analytics and event data in CSV format.
You can permanently delete your account and all associated data (events, logos, analytics) at any time directly from the Danger Zone in your Account Settings.
6. Contact & Privacy Requests
For any inquiries regarding this privacy policy or to exercise your rights, please contact us directly at:
privacy@cal-link.com