Data Security
CalendarPA takes security seriously. Here's how we protect your data:
Encryption
All data is encrypted in transit using HTTPS/TLS
OAuth tokens are encrypted at rest using AES-256-GCM
We never store your calendar provider passwords
Authentication
Secure OAuth 2.0 for calendar connections
No password storage - we use your Google/Microsoft login
Session tokens are securely managed
Payment Security
Payment information is handled directly by Stripe, Square, PayPal, or Stax. CalendarPA never sees or stores your credit card details.
Calendar Data
We only access calendar data necessary for availability checking
Invitee calendar data is never stored
You can disconnect calendars anytime
Infrastructure
CalendarPA runs on Vercel's secure infrastructure with automatic security updates and monitoring.