TimeOffCalendarTimeOffCalendar

Privacy Policy

Last updated: March 10, 2026

1. Introduction

João Rocha de Carvalho ("we", "us" or "our") operates TimeOffCalendar. This page informs you of our policies regarding the collection, use and disclosure of personal data when you use our Service and the choices you have associated with that data.

2. Data Controller Information

The controller of your personal data is:
João Rocha de Carvalho
Praça Álamos 7005-242 Évora, Portugal
Email: joaorocha.dev@gmail.com

3. Data We Collect

We collect several types of information for various purposes:

Account Data:

  • Email address
  • Name
  • Password (encrypted)
  • Profile information
  • Account settings

Usage Data:

  • Access times and dates
  • Pages visited

Calendar Data:

  • Time off and vacation entries you create
  • Country and public holiday preferences
  • Profile names and colors you configure

4. How We Use Your Data

To Provide Our Service:

  • Display and sync your calendar and time off planning
  • Show public holidays for your selected country
  • Manage your account and profiles

To Improve Our Service:

  • Analyze usage patterns
  • Fix technical issues
  • Improve the user experience

To Communicate With You:

  • Send service updates
  • Respond to your requests
  • Provide customer support

5. Legal Basis for Processing

  • Performance of Contract: Processing necessary to fulfil our contract with you
  • Legal Obligations: Processing necessary to comply with legal obligations
  • Legitimate Interests: Processing based on our legitimate interest in improving and promoting our services
  • Consent: Processing based on your specific consent where required

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

  • Account data: For as long as your account is active
  • Calendar content: For as long as needed to provide our services or until you delete your account

7. Your Data Protection Rights

Under GDPR, you have the following rights:

  • Right to access your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restriction of processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent

To exercise these rights, contact us at joaorocha.dev@gmail.com

8. Data Sharing and Third Parties

We share your data with the following third parties:

  • Supabase: For secure data storage and authentication
  • Resend: For sending transactional emails
  • Google Analytics / Vercel Analytics: For anonymous usage analytics (only with your consent)

All third parties are contractually obligated to protect your data and may only use it for specific purposes.

9. International Data Transfers

Your data may be transferred and processed in countries outside the EU. When this occurs, we ensure appropriate safeguards are in place through:

  • EU Standard Contractual Clauses
  • European Commission adequacy decisions
  • Other legally recognised transfer mechanisms

10. Cookies and Tracking

Our service uses cookies in a limited way and only with your explicit consent. When you first visit our site, you are shown a cookie banner where you can choose to accept or decline optional cookies.

Essential Cookies:

We use standard authentication tokens for session management, which are automatically deleted when you log out or close your browser. These are strictly necessary for the service to function.

Analytics Cookies (Optional):

If you accept optional cookies, we use Google Analytics to understand how users interact with our site. Google Analytics uses cookies such as _ga and _ga_* to:

  • Distinguish unique users
  • Analyze browsing patterns
  • Measure site performance

These cookies are stored for up to 2 years. You can withdraw your consent at any time through the cookie settings in the site footer.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

  • Encryption of sensitive data
  • Regular security assessments
  • Access controls and authentication
  • Regular backups

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

We advise you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when posted on this page.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates data protection laws.

For questions about this Privacy Policy, contact: joaorocha.dev@gmail.com

Privacy Policy - TimeOffCalendar