Subprocessor (legal entity)AddressPrivacy contactProcessingLocationTheir subprocessors
Amazon Web ServicesAmazon Web Services, Inc.
410 Terry Avenue North, Seattle, WA 98109-5210, United Stateshttps://pages.awscloud.com/DSAR_RTF.html?Languages=EnglishDatabase, object storage for uploads and Cal Video recordings, backupsData: All product data: account, booking, billing and support records; uploaded images and media; Cal Video recordings and transcriptsUnited StatesView list
CloudflareCloudflare, Inc.
101 Townsend St, San Francisco, CA 94107, United Statesdpo@cloudflare.comDNS, CDN, bot protection (Turnstile), WAF; R2 storage for uploads, avatars and cal.video recordings; email routing metadata; may be used as an alternative email transportData: Uploaded images and media; call recordings and transcripts (configuration-dependent); when used for email: sender/recipient names and addresses, subject and body, calendar invite detailsUnited StatesView list
VercelVercel Inc.
440 N Barranca Ave #4133, Covina, CA 91723, United Statesprivacy@vercel.comHosting and CDN for the app and website; runtime logs (request paths, IPs, hashed identifiers) and BotID bot detectionData: IP addresses, request metadata, and any personal data contained in requests/responses in transitUnited StatesView list
Metabase CloudMetabase, Inc.
9740 Campo Rd., Suite 1029, Spring Valley, CA 91977, United Stateslegal@metabase.comInternal business intelligence and analyticsData: Production account and booking records made available through connected data sourcesUnited StatesView list
SendGrid (Twilio)Twilio Inc.
101 Spear Street, 5th Floor, San Francisco, CA 94105, United Statesprivacy@twilio.comService emails sent by Cal.com staff: changelog, policy and legal notices, subprocessor noticesData: Account-owner name and email; delivery and open logsUnited StatesView list
TwilioTwilio Inc.
101 Spear Street, 5th Floor, San Francisco, CA 94105, United Statesprivacy@twilio.comSMS and WhatsApp reminders, phone verification, phone number lookupData: Phone numbers, message contents, verification codesUnited StatesView list
IntercomIntercom, Inc.
55 2nd Street, 4th Floor, San Francisco, CA 94105, United Stateshttps://preferences.intercom.com/privacySupport chat and support ticketsData: Name, email, account ID, plan, signup date, org and usage counts, contents of support conversationsUnited StatesView list
Daily.coDaily, Co.
548 Market St., Suite 39113, San Francisco, CA 94104-5401, United Stateshelp@daily.coCal Video: video calls, recordings, transcriptsData: Meeting and participant data, audio and video of recorded calls, transcriptsUnited StatesView list
SlackSlack Technologies, LLC
50 Fremont Street, San Francisco, CA 94105, United Statesprivacy@slack.comInternal support and incident communication; booking notifications to users who connect the Cal.com Slack botData: Customer details pasted into support/alert channelsUnited StatesView list
StripeStripe, LLC
354 Oyster Point Boulevard, South San Francisco, CA 94080, United Statesprivacy@stripe.comSubscriptions, checkout, invoices, and customer-collected booking paymentsData: Email, billing name and address, card details entered on Stripe's own checkout (PCI-DSS certified; card numbers never reach Cal.com servers), subscription metadataUnited StatesView list
OpenAIOpenAI OpCo, LLC
1455 Third Street, San Francisco, CA 94158, United Statesprivacy@openai.comAI meeting notes (transcript summaries), calendar AI agent (fallback model), event cover-image generationData: Transcript text (may include names and meeting content); no meeting titles, dates, attendee records, or links. Zero Data Retention agreed with OpenAI; no model training on customer data.United StatesView list
AnthropicAnthropic, PBC
548 Market Street, PMB 90375, San Francisco, CA 94104, United Stateslegal@anthropic.comCalendar AI agent and in-product assistants (opt-in)Data: Event titles, times, attendee names/emails and your instructions; API logs kept up to 30 days; no model training on customer dataUnited StatesView list
Retell AIRetell AI, Inc.
540 Price Ave, Redwood City, CA 94063, United Statessupport@retellai.comCal.ai phone agents that place or take calls (opt-in AI feature)Data: Phone numbers; guest name, email and company where configured; call audio and conversation content. No model training on customer data.United StatesView list
PostHogPostHog Inc.
2261 Market Street #4008, San Francisco, CA 94114, United Statesprivacy@posthog.comProduct analyticsData: IP and request metadata; events keyed to an opaque ID (no raw database IDs, emails, slugs, names or booking answers); GeoIP disabled, proxy strips forwarded IPs; outside allowlisted regions events attributed to organization, not personUnited StatesView list
SentryFunctional Software, Inc. d/b/a Sentry
45 Fremont Street, 8th Floor, San Francisco, CA 94105, United Statescompliance@sentry.ioError monitoring and performance metricsData: Internal user and organization IDs, error messages and stack traces, request URL, browser and OS type (no names, email addresses or IP addresses)United StatesView list
WhopWhop, Inc.
300 Kent Ave #401, Brooklyn, NY 11249, United Statessupport@whop.comCal Payments checkout for paid bookings and host payoutsData: Booker name, email, billing address, card details entered on Whop's checkout; host payout/KYC dataUnited States—
Postmark (ActiveCampaign)AC PM, LLC
1 N Dearborn Street, Suite 500, Chicago, IL 60602, United Statesprivacy@activecampaign.comAutomated transactional email: confirmations, reminders, calendar invites, inbound repliesData: Sender/recipient names and addresses, subject and body, invite details; content kept ~45 daysUnited StatesView list
Trigger.devAPI Hero Ltd trading as Trigger.dev
3rd Floor, 1 Ashley Road, Altrincham, Cheshire, WA14 2DT, United Kingdomprivacy@trigger.devBackground jobs (booking emails, webhooks, AI jobs)Data: Booking/user IDs; for some jobs attendee names, emails and booking details; run logs ~30 daysUnited Kingdom / United StatesView list
UpstashUpstash, Inc.
6202 Via De Adrianna, San Jose, CA 95120, United Statesprivacy@upstash.comCaching and rate limitingData: Cached calendar free/busy slots, rate-limit counters keyed by IP or user ID; no names or emails; short TTLUnited StatesView list
Google PlacesGoogle LLC
1600 Amphitheatre Parkway, Mountain View, CA 94043, United Stateshttps://support.google.com/cloud/contact/dpoAddress autocompleteData: Partial address strings typed into location fields; no requester identity sentUnited StatesView list
MapboxMapbox, Inc.
1233 20th St NW, Suite 450, Washington, DC 20036, United Statesprivacy@mapbox.comGeocoding and static maps for event venuesData: Venue addresses; no requester identityUnited StatesView list
AvatarAPIInfinite Loop Development Ltd
Ballyliffen, Clonmany, Co. Donegal, Ireland, F93 V56Ninfo@infiniteloop.ieProfile-photo lookup at signupData: Your email addressIreland—
Browser UseBrowser Use Inc.
655 Marina Boulevard, 11th Floor, San Francisco, CA 94123, United Statesprivacy@browser-use.comAutomated phishing checks of links in bookings and public profilesData: URLs (may contain names/usernames), page screenshots during the scanUnited StatesView list
People Data LabsPeople Data Labs, Inc.
455 Market Street, Suite 1670, San Francisco, CA 94105, United Stateshttps://privacy.peopledatalabs.com/aboutLead enrichment for hosts who enable itData: Attendee email address and domain; returned professional/company fields, not storedUnited States—
Dub (SMS short links)Dub Technologies, Inc.
2261 Market Street STE 5906, San Francisco, CA 94114, United Statessupport@dub.coShort links in SMS remindersData: Click events incl. IP addressUnited StatesView list