Privacy Policy
Microsoft iCal Pack for Coda
Effective Date: 28 June 2025
1. Who we are
This Pack (“Microsoft iCal Pack”, “we”, “our”) is a third-party integration built for the Coda platform. We have no separate backend: all logic runs entirely within Coda’s infrastructure.
2. What data we access
We do not see or store your Microsoft password, email contents, or full calendar descriptions unless you include them in visible fields.
3. How we collect data
OAuth consent – You explicitly grant the Pack the delegated scope Calendars.ReadWrite (and offline_access) through the Microsoft sign-in page. User actions – Formulas you run (manually or via automations) pull or push calendar data via Microsoft Graph. 4. How we use data
Display events inside your Coda doc. Write-back changes you make in Coda to Outlook. Improve reliability – We analyze anonymized error logs to fix bugs. We never use your data for advertising or resale.
5. How we share data
We share no personal data with third parties except:
Microsoft – when calling Microsoft Graph on your behalf. Coda Inc. – as the hosting provider that already processes your doc data under its own Privacy Policy. 6. Data retention & deletion
In-doc data remains until you delete it or remove the Pack. OAuth tokens are purged automatically if you disconnect the Pack or after 90 days of inactivity. Error logs containing minimal metadata are retained for up to 30 days. 7. Security measures
All Graph traffic is encrypted via TLS 1.2+. Tokens are encrypted at rest using industry-standard AES-256. Least-privilege principle: the Pack requests only the single delegated scope (Calendars.ReadWrite) required for its features. 8. International transfers
Coda’s infrastructure is primarily US-based. By using the Pack you consent to transferring your data to the United States, subject to Coda’s EU Standard Contractual Clauses and Microsoft’s GDPR commitments.
9. Your rights
Depending on your jurisdiction, you may have rights to:
Access, correct, or delete personal data stored in your doc. Withdraw consent by disconnecting the Pack. Lodge a complaint with a supervisory authority (e.g., your local Data Protection Authority). 10. Children’s privacy
This Pack is not intended for users under 16. We do not knowingly collect personal information from children.
11. Changes to this policy
We may update this Privacy Policy. Material changes will be announced in Pack release notes and will take effect 30 days after posting.
12. Contact
For privacy questions or data requests, email . Microsoft, Outlook, and Microsoft Graph are © Microsoft Corp. This Pack is independent and not endorsed by Microsoft.