[Your Company / Legal Name] ("ShareMyPlanner", "we", "us") operates the ShareMyPlanner calendar service at [your domain]. This policy explains what personal data we collect, why, and what rights you have over it.
Data controller contact: [name / support email / postal address if required in your jurisdiction].
Because a calendar's share link grants access to anyone holding it, event data entered by people you've shared a link with is stored the same way as data you enter yourself. We don't collect any identifying information about people who access a calendar only via its share link (we don't know who they are unless they separately create an account).
If you subscribe, your payment is handled directly by Stripe. We never receive or store your full card number. We do receive and store a Stripe customer ID and subscription ID tied to your account, so we know your subscription is active and can let you manage or cancel it.
| Providing the Service (accounts, calendars, events, trial) | Performance of a contract with you |
| Processing and renewing a subscription payment | Performance of a contract with you |
| Keeping the Service secure and working | Legitimate interest |
| Sending account emails (password resets) | Performance of a contract with you |
If you're in the EU/UK, these are the legal bases we rely on under GDPR. [Adjust this table to match what you actually do.]
We keep your account and calendar data for as long as your account exists. If you delete your account, we delete your account record, your calendars, and their events within [e.g., 30 days], except where we're required to keep limited records for legal or accounting reasons (e.g., payment records).
[Note: account deletion isn't built into the current version of the app — add a "Delete my account" flow before you publish this policy, or adjust this section to reflect how deletion actually works, e.g. "email us to request deletion."]
Passwords are hashed, not stored in plain text. We recommend serving the Service over HTTPS in production and keeping your server and dependencies up to date. No method of storage or transmission is 100% secure, and we can't guarantee absolute security.
Depending on where you live, you may have the right to:
To exercise any of these rights, contact [support email].
The Service isn't intended for children under [13 / 16 — check your jurisdiction]. We don't knowingly collect personal data from children under that age.
[If your hosting or Stripe processes data outside your users' country/region — e.g., EU users' data processed in the US — describe the safeguard used, such as Standard Contractual Clauses. Stripe publishes its own information on this.]
We use two essential cookies: a session ID to keep you logged in, and a language preference cookie that remembers whether you've chosen English or Danish. Neither is used for tracking or advertising, so they don't require cookie-consent banners under most regimes — but confirm this if you add any analytics or marketing cookies later.
We may update this Privacy Policy from time to time. We'll update the "Last updated" date above when we do, and for material changes we'll make a reasonable effort to let registered users know.
Questions about this policy or your data? Reach us at [support email].