Is my information secure?

Data Security

CalendarPA takes security seriously. Here's how we protect your data:

Encryption

• All data is encrypted in transit using HTTPS/TLS

• OAuth tokens are encrypted at rest using AES-256-GCM

• We never store your calendar provider passwords

Authentication

• Secure OAuth 2.0 for calendar connections

• No password storage - we use your Google/Microsoft login

• Session tokens are securely managed

Payment Security

Payment information is handled directly by Stripe, Square, or PayPal. CalendarPA never sees or stores your credit card details.

Calendar Data

• We only access calendar data necessary for availability checking

• Invitee calendar data is never stored

• You can disconnect calendars anytime

Infrastructure

CalendarPA runs on Vercel's secure infrastructure with automatic security updates and monitoring.