Privacy Policy

Last updated: September 10, 2026

This Privacy Policy explains how Norm Calendar (“Norm,” “we,” “us”) collects, uses, shares, and protects personal information when you visit normcalendar.com, create an account, book a meeting, or otherwise use our scheduling service (the “Service”).

Scheduling products typically sit between two people. Like other calendar booking tools, we treat account holders (hosts) and people who book with them (guests) a little differently. Where we decide how data is used (for example, when you sign up or fill out our contact form), we act as a controller. Where a host collects guest details through a booking page, we process that information on the host’s behalf so they can run the meeting.

Who this applies to

• Visitors — anyone who opens our marketing site, help pages, or this policy.
• Hosts — people who register for Norm and create booking links, businesses, hours, and holiday settings.
• Guests — people who pick a time on a host’s page. If you have questions about a specific booking, start with the host who invited you; they control that page.

Information we collect

You give us

• Account information — name, email, password, timezone, and preferences you set in the product.
• Workspace data — businesses, booking links, weekly hours, trips, holidays, important dates, and other settings you configure.
• Booking details — guest name, email, notes, and any answers the host asks for, plus the time and location of the meeting.
• Contact form — name, email (entered twice so we can confirm it), topic, and message when you write us.
• Billing information — if you later purchase a paid plan, our payment processor collects card details. We typically keep only limited billing metadata, not your full card number.

From connected calendars and apps

If you connect Google, Microsoft, Apple/iCloud, Zoom, or similar services, we receive the tokens and calendar or meeting data needed to check busy times and create events — only for the permissions you grant those providers. You can disconnect an integration at any time.

Collected automatically

We and our infrastructure providers may log IP address, browser and device type, approximate location from IP, pages viewed, and similar diagnostic data. We use this for security, reliability, and to keep you signed in. We may use cookies or similar storage for sessions and essential product functions. We do not use guest booking emails for marketing.

How we use information

• Operate scheduling: availability, bookings, holidays, and reminders
• Send confirmations, reschedule notices, and account messages
• Authenticate you and protect the Service from abuse
• Understand how the product is used so we can improve it
• Respond to contact-form and support requests
• Comply with law and enforce our Terms of Use

Where privacy law asks us to name a legal basis, we typically rely on performing our contract with you, our legitimate interests in running a secure scheduling service, legal obligations, and — for optional marketing — consent. Which of those applies can depend on where you live and how you use the Service.

When we share information

We do not sell your personal information.

• Service providers — hosting, email delivery, logging, and (when enabled) payment processing, under contracts that limit how they use the data.
• Integrations you turn on — calendar and video providers you connect, so they can show events or join links.
• Hosts and guests — each side of a booking sees the details needed to meet (names, emails, time, location, notes the host collects).
• Legal and safety — if we must respond to a lawful request, prevent harm, or defend our rights.
• Business transfer — if Norm is involved in a merger or sale, information may transfer as part of that transaction, still subject to this policy.

Cookies and similar technology

We use essential cookies and similar storage to keep you logged in and remember basic preferences. We are not running a heavy advertising pixel stack today. If we add optional analytics or marketing cookies later, we will update this policy and, where required, ask for your choice.

Retention

We keep account and booking data while your account is active and as needed for operations, security, and legal purposes. You can delete your account in Settings → Profile. That removes your account and workspaces only you belong to; shared workspaces you leave keep remaining members’ data. Guest bookings stay with the host’s workspace unless they delete them.

Security

We use HTTPS, hashed passwords, and access controls, and we limit who on our side can see customer data. No transmission or storage method is perfectly secure. Please use a strong password and keep your connected calendars’ permissions tight.

Your choices and rights

• Update your profile and notification settings in the product
• Disconnect integrations
• Delete your account
• Ask us for a copy, correction, or deletion of personal information we hold as a controller — use the contact form

Depending on where you live, privacy laws may also give you rights to object, restrict processing, request portability, or lodge a complaint with a regulator. If a host collected your data as a guest, contact that host first; we can help route the request.

Children

Norm Calendar is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has given us data, use the contact form and we will delete it.

International use

Hosts and guests may use the Service from anywhere. We and our providers may process information in various countries. Using the Service means your information may move to those locations, with safeguards appropriate to the transfer.

Changes

We may update this policy as the product grows (we are in beta). The revised version will be posted here with a new “Last updated” date. If a change is material, we may also email account holders or show a notice in the product.

Contact

Use the contact form to reach us about privacy.