1. Controller
The controller responsible for the processing of personal data described here is Digital David AG, Weserstraße 4, 60329 Frankfurt am Main, Germany. For any privacy question or to exercise your rights, contact privacy@kailenty.com.
2. What we collect
- Account information — your name, email address, organisation, and role, provided via Microsoft 365 sign-in when you create or join a workspace.
- Billing details — plan, billing contact, and payment metadata for paid (Pro) workspaces.
- Scheduling data — invites, meetings, availability rules, and the calendar metadata kailenty reads from and writes to your connected Microsoft 365 calendar.
- Invitee data — when someone books through one of your links, we process the name, email, and any answers they submit in order to confirm and manage the meeting.
- Usage and diagnostic data — product interactions and technical logs used to operate, secure, and improve the service.
3. Why we process it and on what legal basis
We process personal data to provide and operate the service, manage subscriptions, send service communications, keep the platform secure, and meet our legal obligations. Depending on the purpose, the legal basis is the performance of a contract (Art. 6(1)(b) GDPR), our legitimate interests in running and securing the service (Art. 6(1)(f) GDPR), compliance with a legal obligation (Art. 6(1)(c) GDPR), or your consent where required (Art. 6(1)(a) GDPR).
4. Microsoft 365 and calendar data
kailenty is native to Microsoft 365. With your authorisation through Microsoft Entra ID (Azure AD), we use the Microsoft Graph API to read availability from your Outlook/Exchange calendar and to write confirmed bookings back to it. We request only the scopes needed to provide scheduling, and Microsoft 365 remains the source of truth for your calendar.
5. AI features
Some features (such as drafting an invite from pasted text) send the relevant content to our AI sub-processor, OpenAI, to generate a result. This data is processed only to provide the feature and is not used to train third-party models.
6. Hosting and data residency
The service runs on Cloudflare infrastructure (Workers and D1) with EU data residency for your scheduling data. Personal data is stored and processed in the European Union, except where a sub-processor necessarily processes limited data elsewhere under appropriate safeguards (see below).
7. Sub-processors
We use a small set of vetted sub-processors to deliver the service. The current list, their purposes, and the safeguards for any international transfers are set out in our Data Processing Addendum.
8. Retention
Account and scheduling data are retained for as long as your workspace is active. After termination, data is deleted in line with your plan’s retention settings and our deletion process, subject to any statutory retention obligations (for example, invoices retained for tax purposes).
9. Your rights
Subject to the conditions of the GDPR, you have the right to access, rectify, erase, restrict, and port your personal data, and to object to certain processing. Where processing is based on consent, you may withdraw it at any time with effect for the future. To exercise any of these rights, contact privacy@kailenty.com. You also have the right to lodge a complaint with a data protection supervisory authority.
10. Cookies
The marketing site and application use only cookies and local storage that are necessary for operation (such as keeping you signed in and remembering your theme). We do not use them for advertising.
11. Changes to this policy
We may update this policy as the service evolves. Material changes will be reflected here with an updated revision date.
12. Contact
Privacy enquiries: privacy@kailenty.com.