Privacy Policy

Effective: September 27, 2026

Data controller

JDG ALYAKSEY VASILEVICH

ul. Sokratesa 7/49, 01-909 Warszawa, Polska

NIP: 1182324699 · REGON: 544172197

Seam ("we", "us") is a two-way calendar sync service between Google Calendar and Apple iCloud Calendar, available on the web at seamcal.com and app.seamcal.com. This page explains what information we collect, why, and what rights you have over it. A native iOS app is planned but not yet available; this policy will be updated before it launches.

Information we collect

Your account: when you sign in with Apple, we receive an Apple user identifier and the email address Apple shares with us (this may be an Apple private relay address).
Google Calendar data: see How Seam uses Google user data below for exactly what we access and keep.
iCloud Calendar data: your Apple ID email and an app-specific password you create for Seam, used to read and write events in the iCloud calendars you choose.
Billing data: your subscription status and payment metadata (amount, date, plan) from Stripe. We never see or store your card number — Stripe holds it directly.
Chat widget: the text of messages you send to the on-page assistant. These are sent to Anthropic's API to generate a reply and are not stored by us afterward.
Website analytics: only if you accept analytics cookies in the banner, Google Analytics records anonymous usage of seamcal.com (pages visited, referring site, device type). If you decline, no analytics cookies are set.

How Seam uses Google user data

When you connect a Google account, Seam asks Google for two permissions, and nothing else:

See the list of your calendars (calendar.calendarlist.readonly) — so you can choose which Google calendar to sync. We read calendar names and IDs only.
View and edit events (calendar.events) — so Seam can read events in the calendar you selected, copy them to iCloud, and write changes from iCloud back to Google. Seam only reads and writes events in calendars you have selected for sync.

What we store. An encrypted OAuth refresh token; for each synced event, its Google and iCloud identifiers plus a fingerprint used to detect changes (a one-way hash, not the event itself); and a history of the changes Seam made — including the event details before and after each change — so you can undo a sync mistake. Event content is otherwise passed straight between Google and iCloud and not kept.

What we never do with it. Seam's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

Google user data is used only to provide the calendar sync you set up, and to keep it working.
It is not transferred to anyone else, except to Apple iCloud as part of the sync you asked for, or when required by law.
It is not used for advertising, is not sold, and is not used to train AI or machine-learning models.
No person reads your calendar data, unless you ask us to for support, it is needed for security purposes (such as investigating abuse), or it is required by law.

Removing access. Disconnecting Google in Seam deletes the stored token. Deleting your Seam account deletes every stored calendar credential and also revokes Seam's access at Google. You can also revoke Seam's access at any time at myaccount.google.com/permissions.

Legal basis for processing (GDPR)

Performance of a contract — for your account, calendar sync and subscriptions: we need your calendar credentials and event data to provide the service you're asking for.
Consent — for using the chat widget and website analytics.
Legal obligation — for keeping billing records required by tax and accounting law.
Legitimate interest — for basic security and abuse prevention (e.g., rate limiting).

How we use it

Calendar credentials and event data are used solely to perform the sync you asked for — nothing else.
Your email is used for account emails: sign-in links, sync problems that need your attention, subscription notices, and a short series of setup tips after you sign up.
Chat messages are used only to generate a response to your question.
Billing data is used only to manage your subscription and comply with tax/accounting obligations.

Third parties we share data with (subprocessors)

We use the following services to operate Seam. Each only receives the minimum data needed to perform its function, and none of them may use your data for their own purposes (e.g., ad targeting or model training).

Google Calendar API — to read and write events on the Google calendar you select.
Apple iCloud (CalDAV) — to read and write events on the iCloud calendar you select.
Apple (Sign in with Apple) — to sign you in.
Stripe — web payment processing and tax calculation.
Anthropic API — processes chat widget messages to generate replies. Data sent to Anthropic is not used to train their models.
Google Analytics — website usage statistics, only if you consent.
Cloudflare — DNS and email routing for our domain.
Email delivery (Gmail SMTP) — used to send account emails.
Our infrastructure provider — hosts the servers Seam runs on, in the EU.

Planned once the iOS app launches (not yet in use): Apple App Store in-app purchases.

We do not sell your data, we do not use it for advertising, and we do not use your calendar content to train AI models.

Storage and security

OAuth tokens and app-specific passwords are encrypted at rest. All traffic is encrypted in transit (HTTPS). Access to production systems is restricted to the developer. Data is hosted within the EU.

Retention and deletion

Calendar sync credentials and sync records are kept until you disconnect the account or delete your Seam account. When you delete your account, your calendar connections, sync records and change history are deleted immediately; a deactivated account record (your Apple identifier and email) is kept so you can come back, unless you ask us to erase it. The change history used for undo is kept for your plan's undo window (7 to 365 days, depending on plan). Billing records are kept as long as tax law requires. To request deletion of any data we hold about you, email hello@seamcal.com.

Your rights (GDPR)

If you're in the EU/EEA, you have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these, email hello@seamcal.com. You also have the right to lodge a complaint with your local data protection authority — for us, the lead authority is Poland's Urząd Ochrony Danych Osobowych (UODO).

Children's privacy

Seam is not directed at children and we do not knowingly collect information from anyone under 13.

Changes to this policy

If this policy changes, the updated version will be posted on this page with a new effective date.

Contact

Questions about this policy: hello@seamcal.com.