Privacy Policy

Effective October 19, 2026 · Updated November 13, 2026

Opalpane lets people at different companies see when each other is free, so they can schedule meetings for a shared project without exposing what is on their calendars. This policy explains what information Opalpane handles, why, who can see it, and the choices you have. Opalpane is operated by DJSC, LLC (“Opalpane”, “we”, “us”).

The short version. We read whether you are free or busy, only for projects you approve, only within the hours you choose, and only while you keep confirming each week. We never show anyone your event descriptions, attendees or notes. Your event titles and locations are shown only if you choose to join Pro+ on a project, and then only to that project’s other Pro+ members (section 2). We don’t sell your information, use it for advertising, or use your calendar data to train AI models.

1. Information we handle

Account information

Your email address, which you use to sign in, and the name you choose to show.
Your company, which we infer from your email domain (for example, a @example.com address is shown as example.com).
Your time zone and the hours you choose to be available, for all your projects or for a single project.
Your plan, and if your company has a company account, the seat assigned to you.

Calendar connection

When you connect Google Calendar or Microsoft 365, we receive access and refresh tokens from your provider. We store them encrypted, and use them only for the purposes in section 2.
Free/busy times. When a member of a project you have approved views that project’s board, we ask your provider whether you are free or busy for the days shown. We use the answer to draw the board and suggest meeting times. We don’t store your calendar events. Microsoft’s response can include event subjects; Opalpane discards them without storing or showing them.
Meeting titles and locations (Pro+ only, if you opt in). If you join Pro+ on a project, when another Pro+ member of that project views its board we ask your provider for the title and location of your events on the days shown. We show them to that member and don’t store them. We skip events you’ve marked private or confidential in your calendar, all-day events and events shown as free, and we never read or show their attendees, descriptions or meeting links (an online meeting is shown as “Virtual”).
Availability checks. We keep a record of each time a project member viewed your availability (who, which project and when), so you can see how often your availability was checked. These records are deleted after 7 days.

Projects and meetings

Project names and descriptions, who is a member or owner, and the history of each sharing request (requested, approved, confirmed, expired, withdrawn).
For meetings scheduled through Opalpane: the title, description, time, repeat pattern, reminder, video meeting link and attendee list the organizer entered, and each attendee’s reply.
For coverage requests (Pro+): the title, time and location the requester entered, who was asked and each person’s answer. When the requester selects someone, the notes they add are sent in a meeting invite to that person.

Sign-in, support and security records

One-time sign-in links (stored only as a secure hash) and session records for signed-in devices.
Requests you send from Help, including the page you came from, which are filed in our support desk.
Server logs used to operate and secure the service, such as request times and a masked client IP address.
An audit log of changes our platform administrator makes to plans, company accounts and seats.

2. Calendar permissions we request

We ask for the narrowest permission each provider offers, and only ask for scheduling access if you choose to organize meetings.

Google Calendar. By default, free/busy only (calendar.freebusy). If you choose to schedule meetings, we also request calendar.events, which we use only to create, update, read the replies to, and cancel the meetings you schedule through Opalpane. If you join Pro+ on a project, we also request calendar.events.readonly, used only to read the title and location of your own events as described in section 1.
Microsoft 365. Microsoft does not offer a free/busy-only permission, so we request Calendars.Read (plus offline_access to stay connected). We use it only to request your free/busy schedule, to read the meetings created through Opalpane, and, if you join Pro+ on a project, to read the title and location of your own events as described in section 1. If you choose to schedule meetings, we also request Calendars.ReadWrite, used only to create, update and cancel the meetings you schedule through Opalpane.

Opalpane’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We don’t use Google or Microsoft calendar data for advertising, don’t sell it, don’t use it to train AI or machine-learning models, and don’t let people read it except as you direct (for example, project members seeing your free/busy times), for security, or where the law requires.

3. How we use information

To run the service: sign you in, show project boards, suggest times and schedule meetings.
To send service emails: sign-in links, sharing requests, approvals, weekly confirmations, expiry notices and meeting-related messages.
To answer support requests and feedback, and to improve Opalpane during the pilot.
To keep the service secure, prevent abuse, and meet legal obligations.

4. Who can see your information

Members of projects you approve see your name, company, time zone, the hours you chose for that project, whether you are free or busy within them, and whether your sharing is active. They don’t see your email address. Sharing with one project never extends to another. Project owners confirm their sharing each week like everyone else.
Pro+ members of a Pro+ project who have also joined Pro+ there see the titles and locations of your events, if you have joined Pro+ on that project too. Nobody else sees them, including members of the same project who haven’t joined Pro+.
Meeting attendees see the meeting details the organizer entered, and the other attendees’ email addresses, through their own calendar invite. Other project members see only that a meeting exists, when, and who organized it.
Our platform administrator can see account, plan and project membership information to operate the service. They do not see your event details, which we don’t store.
Service providers who process information for us under contract: Render (application hosting and database, United States), Resend (email delivery), Atlassian (our support desk) and Google Fonts (web fonts loaded by the app, which receives your IP address). Google and Microsoft process your data as your calendar providers under their own terms.
Others, only if required by law, to protect the rights and safety of users or the public, or as part of a merger or sale of the service, in which case this policy continues to apply.

5. How long we keep it

Sharing with a project ends automatically if you don’t confirm it each week (after a short grace period), and you can withdraw it at any time.
When a project is archived, Opalpane stops reading calendars for it.
Event titles and locations read for Pro+, including when searching for who can cover a meeting, are never stored. A coverage request closes when it is filled or cancelled, or when its time passes, and is deleted 7 days later.
Sign-in links expire after 15 minutes; sessions expire after 30 days.
If you’re no longer in any project, your calendar connection is removed after 7 days.
If you are invited to a project and don’t respond, or decline, the invitation is removed after 7 days. If you never signed in, your email address is removed with it.
We keep account and project records while your account is active. If you ask us to delete your account, we delete your account, calendar tokens and personal records within 30 days, except where we must keep them for legal or security reasons. Copies in backups are removed as those backups expire.

6. Your choices

Withdraw sharing for any project in Opalpane, or simply don’t confirm it.
Change your hours for all projects or for one project.
Stop sharing meeting titles and locations on any Pro+ project from that project’s page, or mark individual meetings private in your calendar.
Disconnect your calendar at any time from your provider: Google account connections or Microsoft My Apps.
Disconnect or delete in Opalpane. Under Account you can disconnect your calendar or delete your account. Disconnecting removes your stored tokens and revokes Google’s access; for Microsoft, also remove Opalpane in My Apps. Deleting takes effect immediately, and if you were a project’s only owner that project is archived.
Access, correct or delete your information by choosing “Account & privacy” in Help, or by emailing info@djsc.net. Depending on where you live, you may have further rights under local law, and we will honor them.

7. Security

Calendar tokens are encrypted at rest, all traffic uses HTTPS, sessions use secure HTTP-only cookies, sign-in links are single-use and time-limited, and every request is checked against your identity on the server. No system is perfectly secure; if we learn of a breach affecting your information, we will notify you as the law requires.

8. Cookies

Opalpane uses only cookies needed to keep you signed in and to protect calendar-connection sign-ins. We don’t use advertising or analytics cookies.

9. Where information is processed

Opalpane is hosted in the United States. If you use it from elsewhere, your information is transferred to and processed in the United States.

10. Children

Opalpane is a tool for work and is not intended for anyone under 16.

11. Changes

If we change this policy in a way that matters, we will tell you by email or in the app before the change takes effect.

12. Contact

Questions or requests: info@djsc.net, or “Account & privacy” in Help when you’re signed in.