Who is responsible
The data controller is icalsync, Auto-entrepreneur, Marrakech, Morocco. Contact: mounir.aboulama92@gmail.com.
Data we collect
Account: name, email address, password (stored encrypted), language, timezone and preferences.
Calendars and bookings: the iCal links you connect and the events they contain (dates, and the guest name when the platform provides it), bookings and closed dates you add, meetings and the email addresses of the guests you invite.
Online check-in (guests of our customers): first and last name, date of birth, profession (optional), a photo of an identity document, arrival and departure dates and times, email, WhatsApp number (optional), names of travelling companions and an electronic signature. This data is collected on behalf of the host who sent the link; the host is responsible for it and we process it on their instructions.
Sign in with Google (optional): if you choose it, Google sends us your name, email address and a Google account identifier, used only to create your account and sign you in. We never receive your Google password.
Payments: by bank transfer or through Payoneer. We never see or store your card details. For a transfer, our bank shows us the payer's name and the transfer label; we keep the payment reference, amount and date to issue invoices.
Technical data: IP address for security (anti-spam, protection against brute-force attacks), email delivery logs, and the browser endpoint if you enable browser notifications.
Why we use it
To provide the service (synchronising calendars, detecting double bookings, sending reminders and invitations), to manage your account and subscription, to secure the platform, to answer your messages, and to meet our legal and accounting obligations. The legal bases are the performance of our contract with you, our legitimate interest in securing the service, your consent where required, and our legal obligations.
Cookies and audience measurement
We only use cookies that are necessary for the site to work: the login session cookie, a security cookie, and a cookie remembering your language. Your light/dark display choice is stored in your browser.
Our audience statistics use no cookies and store no IP address: a visitor is counted with an anonymous code that changes every day.
Fonts are loaded from Google Fonts, which means your browser connects to Google servers, which receive your IP address.
Advertising (Google AdSense)
Some public pages display ads served by Google. Google and its partners use cookies to show ads based on your visits to this and other websites. You can manage personalised advertising in Google Ads Settings. Learn how Google uses data: policies.google.com/technologies/partner-sites.
Visitors from the European Economic Area, the United Kingdom and Switzerland are asked for their consent through a certified consent tool before personalised ads are shown. Ads are never shown inside the customer application.
Who receives your data
Our hosting provider (Hostinger), our email sending service, our bank and Payoneer for payments, and — when you use them — the platforms whose links you connect and the guests you invite. Data is never sold. Some of these providers may process data outside Morocco or the European Union, under appropriate safeguards.
How long we keep it
Account data: as long as your account is active, then deleted on request or after closure. Unconfirmed accounts without activity are deleted after 7 days.
Check-in identity photos: deleted automatically 30 days after the guest's departure (the host can shorten this period). The other check-in information stays available to the host for their guest register.
Notifications: 60 days. Audience statistics (anonymous): 400 days. Invoices: as long as required by accounting law.
Security
Traffic is encrypted (HTTPS), passwords are encrypted, export links are secret, and identity documents are stored in a private folder that only the host can access.
Your rights
You can access, correct or delete your data, object to its processing and ask for a copy, by writing to mounir.aboulama92@gmail.com. These rights are provided by Moroccan law 09-08 and, for people in the European Union, by the GDPR. You can lodge a complaint with the CNDP (Morocco) or the data protection authority of your country. Guests who completed a check-in should first contact their host.
