Are my data and my calendar safe with Kilevo?

Kilevo reads your calendar without being able to change it: the permissions requested from Google (calendar.readonly, calendar.events.readonly) and from Microsoft (Calendars.Read) are read-only rights. No write permission is requested, anywhere. Kilevo can neither create, move nor delete an appointment.

From an appointment, Kilevo keeps the location, the date, the times and the title, which becomes the business purpose of the trip. The description is read but never stored; attendees and attachments are neither read nor kept. An appointment without a location produces no trip and is not stored.

The token that authorizes reading your calendar is encrypted in the database. Your receipts are stored outside the server's public directory, with no direct URL, and every download goes through an access check. Payment is handled by Stripe: no card data passes through our servers. Data is hosted by OVHcloud in France, under the GDPR, the European data protection regulation, and we use no audience measurement tool.

You can disconnect a calendar at any time from My calendars with the Disconnect button: trips already imported are kept and the token is deleted from our database.

The details are on the security and privacy page. For a complete revocation, also remove Kilevo from the list of authorized apps of your Google or Microsoft account.