Is TidyCal GDPR Compliant?

TidyCal is GDPR compliant with data erasure requests, account deletion, CSV data export, a Data Processing Agreement (DPA), and a comprehensive Privacy Policy.

Overview

TidyCal, operated by Sumo Group Inc., is designed to comply with the General Data Protection Regulation (GDPR) (EU 2016/679). TidyCal provides built-in tools so both account holders and their contacts can exercise their data rights, including the right to erasure, data portability, and account deletion.

Key GDPR features in TidyCal:

• Data Erasure Request form — public form at tidycal.com/gdpr for contact data removal
• Account deletion — self-service for Free Plan users; support-assisted for paid plans
• CSV data export — export contacts and bookings (Individual, Pro, or Agency Plan)
• Data Processing Agreement (DPA) — available at tidycal.com/dpa
• Privacy Policy — available at tidycal.com/privacy-policy

Data Erasure Requests

TidyCal provides a public Data Erasure Request form that allows anyone — including your contacts who booked through your page — to request removal of their personal data. No login is required.

How to Submit a Data Erasure Request

1. Go to tidycal.com/gdpr.
2. Enter the email address associated with the data you want removed in the E-Mail Address field.
3. Click Submit.
4. If the email is found in the system, a confirmation email will be sent to that address.
5. Open the confirmation email and click the removal link to complete the erasure.

Important notes:

• The form is rate limited to 3 requests per minute to prevent abuse.
• For security, the success message always says: "If [email] is found, an email will be sent to this email address with a link for removal." — this prevents confirming whether an email exists in the system.
• Once confirmed, all contact records associated with that email are permanently deleted.

Account Deletion

TidyCal account holders can permanently delete their account and all associated data. This cannot be undone. See also How to Change Your TidyCal Account Settings.

Free Plan Users

Free Plan users can delete their account directly from Settings:

1. Go to Settings → Account.
2. Scroll to the Delete account section (highlighted in red).
3. Click Delete account.
4. Confirm the action when prompted: "Are you sure you want to delete your account? This action cannot be undone."
5. A confirmation email will be sent. Click the link in the email to finalize the deletion.

Individual Plan, Pro, and Agency Plan Users

Paid accounts (Individual Lifetime, Pro and Agency Lifetime) are deleted by the support team:

1. Go to Settings → Account.
2. You will see a note: "Because you have a paid account, please contact support@tidycal.com to request account deletion."
3. Email support@tidycal.com to request deletion.

What gets deleted: your TidyCal account and all associated data, including your booking pages, booking types, bookings, contacts and connected calendars. Deletion is permanent and cannot be undone. On a paid plan, export your contacts and bookings first if you want a copy (see Data Export below).

Data Export (CSV)

Users on the Individual Plan, Pro, or Agency Plan can export their data in CSV format, supporting the GDPR right to data portability.

Export Contacts

1. Go to Contacts.
2. Click the CSV export option to download all contact records.

Export Bookings

1. Go to Bookings.
2. Click the CSV export option to download all booking records.

Note: CSV export is not available on the Free Plan. Upgrade to the Individual Plan, Pro, or Agency Plan to access this feature.

Privacy Policy and Data Processing Agreement

TidyCal maintains two key legal documents that outline how personal data is collected, processed, and protected:

Privacy Policy

The TidyCal Privacy Policy covers:

• What personal data is collected and why
• How data is used and stored
• Third-party data sharing policies
• TidyCal commitment: "We WILL NEVER sell your information to a third party."
• User rights under GDPR and other data protection regulations

Data Processing Agreement (DPA)

The TidyCal Data Processing Agreement outlines:

• Sumo Group Inc. (d/b/a "TidyCal") acting as both data controller and data processor
• Data processing responsibilities and compliance commitments
• GDPR (EU 2016/679) compliance framework

Your Data Rights Under GDPR

As a TidyCal user, you have the following rights:

• Right to Access — Request access to the personal data TidyCal stores about you
• Right to Rectification — Request corrections to inaccurate or outdated information
• Right to Erasure — Request deletion of your data (see Data Erasure Requests and Account Deletion above)
• Right to Restriction of Processing — Control the scope of how your data is processed
• Right to Data Portability — Export your data in a common format (see Data Export above)

Security Features

TidyCal includes several security measures that support GDPR compliance:

• Device verification — Email verification required when logging in from unrecognized devices. Manage trusted devices in Settings. See Trusted Devices - Account Security for details.
• reCAPTCHA protection — Available on booking pages to prevent spam and bot submissions.
• Rate limiting — GDPR data erasure requests are limited to 3 per minute to prevent abuse.
• Security precautions — The Privacy Policy states that TidyCal takes security seriously and takes numerous precautions to protect personal information.

Troubleshooting

I submitted a data erasure request but did not receive a confirmation email

• Check your spam or junk folder for the confirmation email.
• Make sure you entered the exact email address that was used when booking.
• The system will always show a success message for privacy reasons, even if the email is not found. If you do not receive the email, the address may not exist in the system.
• Wait a few minutes — there may be a short delay in email delivery.
• If the issue persists, contact support@tidycal.com for assistance.

I cannot delete my account from Settings

• If you are on the Individual Plan, Pro, or Agency Plan, the self-service delete button is disabled. You must contact support@tidycal.com to request account deletion.
• If you see "Invalid deletion link or unauthorized access," make sure you are logged in to the same TidyCal account that requested the deletion, then open the link again. If you are logged out, you will see "You must be logged in to delete your account": log in and try again, or request a new link from Settings → Account.

I cannot find the CSV export option

• CSV export is only available on the Individual Plan, Pro, or Agency Plan.
• If you are on the Free Plan, you will need to upgrade your plan to export data.

Frequently Asked Questions

Is TidyCal GDPR compliant?

Yes. TidyCal provides data erasure requests, account deletion, CSV data export, a Data Processing Agreement (DPA), and a Privacy Policy — all in compliance with GDPR requirements.

How can my contacts request deletion of their data?

Anyone can visit tidycal.com/gdpr and submit a data erasure request. They will receive a confirmation email with a link to complete the removal. No login or TidyCal account is required.

Does TidyCal offer a Data Processing Agreement?

Yes. The standard DPA is publicly available at tidycal.com/dpa. It names Sumo Group Inc. (d/b/a "TidyCal") as both the data controller and the data processor.

Does TidyCal sell my data?

No. The TidyCal Privacy Policy explicitly states: "We WILL NEVER sell your information to a third party."

Related Articles

• How to Change Your TidyCal Account Settings
• Trusted Devices - Account Security
• How do I contact TidyCal support?