Excelendar LogoExcelendar.
Legal/Privacy Policy

Privacy Policy

Effective Date: 1 Jan 2026

GCalTools ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use Excelendar (the "Service").

Company Information:

GCalTools (Gerstenberg: SIRET 53406391200016)

Nice 06000, France

Email: info@gcaltools.com

1. Information We Collect

Your Data Stays in Your Microsoft Account

  • Calendar and Excel Data: All your calendar events and Excel spreadsheet data remain entirely within your own Microsoft 365 or Microsoft Personal account. Excelendar acts as a bridge between Excel and Outlook Calendar, so your data is never copied to or stored on our servers.
  • Transient Processing Only: When you perform import, export, or sync operations, data passes through our Azure backend solely to facilitate the transfer between Excel and your Outlook Calendar. This processing is transient and encrypted in transit using TLS 1.3.
  • No Event Storage: We do not store, log, or retain any calendar event details, spreadsheet content, or personal schedule information.

    • Personal Information

  • Email Address: If you create a portal account, we collect and store your email address (encrypted using AES-256-GCM) and Microsoft ID for account identification and service communications.

    • Authentication

  • Auth Tokens: Authentication tokens obtained during Microsoft sign-in are used only for the duration of your session to authorize API calls to your Microsoft 365 account. Auth tokens are never stored, logged, or persisted on our servers.

    • Excel Add-In Activity Logs (Consent Required)

    Activity and error logs from the Excel Add-In are only collected and stored on our servers if you have explicitly created a portal account and consented to logging. If you have consented, we store only metadata:

  • Calendar Names: The names of calendars you sync (not event contents)
  • Worksheet Names: The names of Excel worksheets you use (not cell data)
  • Row Numbers: For error logs, the row numbers where issues occurred (not row contents)
  • Operation Types: Whether you performed an import, export, or sync operation
  • Timestamps: When operations occurred

    • We never store: Event titles, descriptions, attendees, locations, dates, Excel cell values, formulas, or any actual content from your calendar or spreadsheets.

    Web App Activity Logs (Local Only)

    The Excelendar Web App stores activity and error logs only on your device using browser local storage. These logs never leave your device and are not transmitted to our servers. You can clear this data at any time through your browser settings or the Web App interface.

    2. How We Use Your Information

    We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Authenticate your account and provide access to features
  • Process your export requests
  • Send you service-related notifications and important updates
  • Respond to your requests and provide customer support
  • Comply with legal obligations

    • We do not:

  • Sell or rent your personal information to third parties
  • Store your calendar events, Excel data, or any content from your Microsoft account
  • Store or log authentication tokens
  • Collect Excel Add-In activity/error logs without your explicit consent (Web App logs stay on your device)
  • Use your data for any purpose other than providing the sync functionality you request

    • 3. Data Access & Processing

    Infrastructure

  • Azure Backend: Excelendar runs entirely on Microsoft Azure, using Azure Container Apps for our application backend and Azure SQL for database storage. All infrastructure is hosted in secure Azure US data centers with enterprise-grade security.
  • Encryption Standards: All data in transit is encrypted using TLS 1.3. Stored email addresses are encrypted using AES-256-GCM. All database connections use encrypted channels.

    • Outlook Calendar Permissions

  • Scope: We request read-write access to your Outlook Calendar.
  • Purpose: Access is used solely to manage calendar events as requested by you.
  • Transient Processing: Calendar data passes through our Azure backend only during active operations and is immediately discarded. No calendar or worksheet content is ever written to our database or logs.

    • Microsoft Integration

  • Subscription Management: AppSource subscriptions and payment information is managed exclusively by Microsoft through their commerce platform.
  • Microsoft's Privacy Policy: Microsoft's collection and use of your payment and subscription data is governed by Microsoft's Privacy Statement.
  • Data We Don't Collect: We do not collect, store, or process any payment card information, billing addresses, or other payment-related data.

    • 4. Data Sharing & Third Parties

    We do not sell or rent your personal information to third parties. We use only two third-party service providers:

  • Microsoft Azure: Our entire infrastructure is hosted on Microsoft Azure, including our application backend and database. Business subscriptions are managed through the Microsoft 365 Marketplace.
  • Stripe: Personal subscription payments are processed by Stripe. We do not store payment card details: Stripe handles all payment processing securely.
  • Legal Requirements: We may disclose your information if required by law, court order, or governmental authority, or to protect our rights, property, or safety.

    • 5. Data Security

    We implement appropriate technical and organizational security measures to protect your information from unauthorized access, alteration, disclosure, or destruction.

    6. Data Retention

  • Email Address: We retain your encrypted email address for as long as your portal account is active.
  • Calendar and Excel Data: Calendar and Excel data is processed transiently and is never retained. Your data remains in your Microsoft account.
  • Excel Add-In Activity Logs: If you have consented to logging, activity metadata from the Excel Add-In (calendar names, worksheet names, operation types) is retained for 30 days or until you delete your account. Web App logs are stored only on your device and are not retained by us.
  • Account Deletion: You can delete your account at any time through the Settings page in the Excelendar Portal. Deleting your account permanently removes all your data including your email address, activity logs, and error history. This deletion is immediate and irreversible.
  • Using Excelendar Without an Account: You can use the Excelendar Excel add-in without creating a portal account. In this case, no personal data or activity logs are stored on our servers.

    • 7. Your Rights (GDPR Compliance)

    GCalTools is a company based in France and is subject to the General Data Protection Regulation (GDPR). Although our infrastructure is hosted on Microsoft Azure (US), you have the following rights under the GDPR:

  • Right of Access: You may request a copy of the personal information we hold about you.
  • Right to Rectification: You may request correction of inaccurate information.
  • Right to Erasure: You may delete all of your personal information at any time, including activity and error logs, by deleting your account in the Portal Settings.
  • Right to Restrict Processing: You may request that we limit how we use your information.
  • Right to Data Portability: You may request a copy of your information in a structured, machine-readable format.
  • Right to Object: You may object to our processing of your information.
  • Right to Withdraw Consent: You may withdraw consent at any time where we rely on consent to process your information.

    • To exercise any of these rights, please contact us at info@excelendar.com. We will respond to your request within 30 days.

    8. International Data Transfers

    Your information is processed on Microsoft Azure infrastructure, which may include data centers outside the European Economic Area (EEA). Microsoft Azure complies with GDPR requirements and provides appropriate safeguards for international data transfers through Standard Contractual Clauses and other legally recognized mechanisms.

    9. Children's Privacy

    The Service is not intended for children under the age of 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will delete it promptly.

    10. Cookies & Tracking

    We may use essential cookies and similar technologies to operate the Service and maintain your session. We do not use third-party advertising or tracking cookies. You can control cookies through your browser settings, though disabling cookies may affect the functionality of the Service.

    11. Changes to This Privacy Policy

    We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Changes will be effective when posted to this page. We will notify you of material changes by email or through the Service. Your continued use of the Service after changes are posted means you accept the updated Privacy Policy.

    12. Contact Us & Data Protection Officer

    For questions about this Privacy Policy, to exercise your rights, or to contact our Data Protection Officer, please reach out:

    GCalTools/Gerstenberg

    Email: info@gcaltools.com

    Website: https://www.gcaltools.com

    13. Supervisory Authority

    If you are located in the European Union and have concerns about our data processing practices, you have the right to lodge a complaint with your local data protection supervisory authority.

    Last updated: 1 January 2026