Privacy Policy

Welcome to Ocal. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our website and tell you about your privacy rights and how the law protects you.

This privacy policy applies to all users of our platform, including students, educators, and administrators.

The use of raw or derived user data received from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

This means that we will only use Google user data to provide and improve user-facing features that are prominent in the requesting application's user interface. We will not transfer this data to others unless necessary to provide and improve these features, comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to users. We will not use this data for serving ads, including retargeting, personalized, or interest-based advertising.

We may collect the following types of information:

• Personal Information: Name, email address, phone number, and educational institution.
• Calendar Information: Events, schedules, and related data when you connect third-party calendars.
• Usage Data: Information about how you use our platform, including preferences, settings, and interactions.
• Device Information: IP address, browser type, device type, and operating system.

We use your personal data for the following purposes:

• To provide and maintain our service
• To notify you about changes to our service
• To allow you to participate in interactive features when you choose to do so
• To provide customer support
• To gather analysis or valuable information so that we can improve our service
• To monitor the usage of our service
• To detect, prevent and address technical issues

We do not share, transfer, or disclose your Google user data with third parties.

Your Google user data is used exclusively within Ocal to provide calendar management and scheduling features. We maintain strict data isolation and do not sell, rent, or share your personal information or Google user data with any external parties for their marketing purposes.

The only circumstances under which we may disclose your data are:

• Legal Requirements: If required by law, regulation, legal process, or governmental request.
• Protection of Rights: To protect the rights, property, or safety of Ocal, our users, or the public.
• Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business, with prior notice to affected users.

Ocal uses artificial intelligence and machine learning models to provide intelligent scheduling and calendar management features. Here's how these models interact with your data:

• In-Memory Processing Only: Your Google user data is processed exclusively in-memory for real-time features such as schedule optimization, conflict detection, and intelligent suggestions. This data is not stored permanently for AI training purposes.
• No External Model Training: We do not use your personal data or Google user data to train external AI models. All AI processing happens within our secure infrastructure.
• No Data Sharing with AI Providers: Your data is never shared with third-party AI service providers. All AI processing occurs within Ocal's controlled environment.
• Temporary Processing: AI-processed data is used only for the duration needed to provide the requested service and is not retained after the processing is complete.

Our AI features are designed to enhance your calendar experience while maintaining the highest standards of privacy and data protection.

Our platform integrates with several third-party services, including:

• Google Calendar: When you connect your Google Calendar, we store access tokens to sync events and schedules.
• Canvas LMS: We may connect to your educational institution's Canvas system to import course schedules and assignments.
• Other Calendar Services: Similar to Google Calendar, we may store access tokens for other calendar services you connect.

We only access and store the minimum information required to provide our services. You can disconnect these integrations at any time through your account settings.

We implement appropriate security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data
• Regular security assessments
• Restricted access to personal information
• Use of secure database systems and hosting providers

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or method of electronic storage is 100% secure.

Depending on your location, you may have certain rights regarding your personal data, including:

• Right to Access: You can request copies of your personal data.
• Right to Rectification: You can request that we correct inaccurate information.
• Right to Erasure: You can request that we delete your personal data in certain circumstances.
• Right to Restrict Processing: You can request that we restrict the processing of your data.
• Right to Data Portability: You can request to receive your data in a structured, commonly used format.

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section.

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.