Privacy Policy

Data controller: Daniel Arochena Escobar, operator of Calendaro under the commercial name ARTION Systems. Contact: hola@calendaro.xyz.

Full identifying information is available in the Legal Notice.

Content you send. Text, images and schedule information you upload or type, and the resulting events.

Service email. The address you enter to create, save and recover your calendars.

Minimal technical data. A salted, hashed fingerprint derived from your IP address and browser, used only for security, abuse prevention, rate limiting and diagnostics.

To analyse your schedule and create, serve and manage your calendar: performance of the service you request.

To keep the service secure, available and free from abuse: our legitimate interest.

To send marketing communications: your consent, only if you opt in.

Your email is required to save and recover your calendar and to send strictly functional messages such as sign-in links. This does not depend on marketing consent.

Marketing communications (news, tips, features and commercial messages about Calendaro and other digital products operated under ARTION Systems) are sent only if you tick the separate optional box. You can withdraw that consent at any time from My calendars or by writing to us, without affecting the service.

To read your schedule, the text and images you send are processed by large language models accessed through the Lovable AI gateway (currently OpenAI models), acting as processors. The content is processed to return your result. Please do not upload personal data you do not need in your calendar.

Text that appears inside an image is treated as data, never as instructions to the system.

Lovable provides hosting, the database, authentication and transactional email (sign-in links). AI models are accessed through the Lovable AI gateway as described above. No other processors are involved today, and no marketing platform is connected.

Some providers may operate outside the European Economic Area; in that case transfers rely on the European Commission's standard contractual clauses or another adequate safeguard. We do not sell your data.

Images and text: processed transitorily to produce your events. The original images are not stored in our database or in any file storage; they exist only for the duration of the request.

Calendars: kept until you delete them or delete your account, unless a legal obligation requires otherwise.

Marketing: until you withdraw your consent.

Consent evidence: kept for as long as necessary to demonstrate it and to comply with legal obligations.

Security logs: automatically deleted after 30 days.

Access to calendars is validated on the server. Subscription links use cryptographically random, non-sequential identifiers and can be revoked at any time, which immediately invalidates the previous link.

You can request access, rectification, erasure, restriction, portability where applicable and objection, and withdraw your consent at any time. You can also delete your calendars and your account yourself from My calendars.

Write to hola@calendaro.xyz. You may also lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

Where the English translation differs from the Spanish legal text, the Spanish version is the reference version, without prejudice to mandatory rights applicable to the user.