Terms of Service & Acceptable Use Policy

1. What this covers

By creating a Caliyo account, you agree to this Terms of Service and Acceptable Use Policy, and to the data practices described below. Caliyo helps you manage your calendar and schedule meetings, including letting other people request time with you by email — even if they don't have a Caliyo account themselves. That openness only works if everyone uses it responsibly, which is what this policy protects.

2. Acceptable use

You may not use Caliyo to:

• Send unsolicited bulk messages, spam, or phishing content through meeting requests, invitations, or any other contact feature.
• Harvest, scrape, or export contact information, email addresses, or availability data belonging to other users or people who haven't given you permission to access it.
• Import contact lists you don't have the right to use, or use imported contacts for purposes other than scheduling with people you already know.
• Impersonate another person or organization, or misrepresent your identity or affiliation when requesting a meeting.
• Circumvent rate limits, abuse meeting-request or booking-link features to flood another person's calendar, or otherwise interfere with anyone else's use of the service.
• Use the service for any unlawful purpose or in a way that violates the rights of others.

We may apply automated and manual checks — such as rate limiting or request review — to detect abuse of these features.

3. How we handle your data (privacy basics)

• We only request the calendar access needed to power scheduling: calendar read/write and read-only contacts. We do not request access to Gmail or Drive.
• Calendar data, contact information, and connected-account tokens are stored encrypted at rest and in transit, and OAuth tokens are additionally encrypted with a dedicated encryption key before storage.
• Our AI features run on Anthropic's Claude models via AWS Bedrock, inside Caliyo's own cloud environment. Per our agreement with AWS, none of your prompts or data are used to train AI models or shared with the model provider.
• Our infrastructure is hosted in the United States.
• We do not sell your personal data to third parties.
• You can request deletion of your account and data at any time by contacting us; deletion is completed within 30 days.

We do not currently hold formal third-party security certifications (for example, SOC 2 or ISO 27001). If that changes, we'll update this page.

This section is a summary of our data practices for the purposes of this agreement, not a complete privacy policy — a more detailed policy is available at caliyo.com and may be updated independently of this page.

4. Suspension and termination

Violating this Acceptable Use Policy — including spamming, harvesting contacts, abusing meeting-request features, or attempting to defraud or harass another user — may result in a warning, temporary suspension, or permanent termination of your account, at our discretion. We'll try to notify you of enforcement action and the reason for it, unless doing so would itself create risk, such as an active abuse or fraud investigation.

5. Changes to this agreement

This is the first version of this agreement, published to support Caliyo's open, anyone-can-request-a-meeting model. We expect to revise it as the product and our policies mature. Continuing to use Caliyo after a material update means you accept the revised terms; we'll update the version date at the top of this page whenever we do.