Skip to content

Privacy policy

Privacy Policy

Microsoft iCal Pack for CodaEffective Date: 28 June 2025

1. Who we are

This Pack (“Microsoft iCal Pack”, “we”, “our”) is a third-party integration built for the Coda platform. We have no separate backend: all logic runs entirely within Coda’s infrastructure.

2. What data we access

Category
Examples
Purpose
Storage location
Calendar data
Event IDs, titles, start/end times, locations, attendees, body preview
Populate sync tables; allow create / update / delete actions
Stored only inside the Coda doc where you use the Pack.
OAuth tokens
Microsoft Graph access + refresh tokens
Authorize secure calls to your Outlook calendar
Encrypted and stored by Coda’s servers (never by us).
Usage metadata
Pack install ID, formula invocation counts
Diagnose errors, measure feature usage
Coda’s standard telemetry; aggregated, non-personal.
There are no rows in this table
We do not see or store your Microsoft password, email contents, or full calendar descriptions unless you include them in visible fields.

3. How we collect data

OAuth consent – You explicitly grant the Pack the delegated scope Calendars.ReadWrite (and offline_access) through the Microsoft sign-in page.
User actions – Formulas you run (manually or via automations) pull or push calendar data via Microsoft Graph.

4. How we use data

Display events inside your Coda doc.
Write-back changes you make in Coda to Outlook.
Improve reliability – We analyze anonymized error logs to fix bugs.
We never use your data for advertising or resale.

5. How we share data

We share no personal data with third parties except:
Microsoft – when calling Microsoft Graph on your behalf.
Coda Inc. – as the hosting provider that already processes your doc data under its own Privacy Policy.

6. Data retention & deletion

In-doc data remains until you delete it or remove the Pack.
OAuth tokens are purged automatically if you disconnect the Pack or after 90 days of inactivity.
Error logs containing minimal metadata are retained for up to 30 days.

7. Security measures

All Graph traffic is encrypted via TLS 1.2+.
Tokens are encrypted at rest using industry-standard AES-256.
Least-privilege principle: the Pack requests only the single delegated scope (Calendars.ReadWrite) required for its features.

8. International transfers

Coda’s infrastructure is primarily US-based. By using the Pack you consent to transferring your data to the United States, subject to Coda’s EU Standard Contractual Clauses and Microsoft’s GDPR commitments.

9. Your rights

Depending on your jurisdiction, you may have rights to:
Access, correct, or delete personal data stored in your doc.
Withdraw consent by disconnecting the Pack.
Lodge a complaint with a supervisory authority (e.g., your local Data Protection Authority).

10. Children’s privacy

This Pack is not intended for users under 16. We do not knowingly collect personal information from children.

11. Changes to this policy

We may update this Privacy Policy. Material changes will be announced in Pack release notes and will take effect 30 days after posting.

12. Contact

For privacy questions or data requests, email .
Microsoft, Outlook, and Microsoft Graph are © Microsoft Corp. This Pack is independent and not endorsed by Microsoft.
Want to print your doc?
This is not the way.
Try clicking the ··· in the right corner or using a keyboard shortcut (
CtrlP
) instead.