Privacy Policy

Last updated: July 2026

1. Introduction

Closira ("we", "our", "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service, particularly in connection with our Google Calendar integration for WhatsApp appointment reminders.

Closira is based at Amstelstraat 22, 4388RM, Oost-Souburg, the Netherlands.

2. Data We Collect

2.1 Google Calendar Data

When you connect your Google Calendar account, we access the following Google user data:

  • Calendar events — event titles, descriptions, start and end times, and attendee names
  • Contact information — names and phone numbers extracted from event descriptions (when provided)

We access only your calendar events to identify upcoming appointments for the purpose of sending WhatsApp reminders.

2.2 Other Data You Provide

  • Account information — name, email address, and company name
  • WhatsApp Business Account information — phone number, WABA ID, and Meta access tokens
  • Message templates — the content of WhatsApp message templates you create for reminders

3. How We Use Your Data

We use the data we collect for the following purposes:

  • Google Calendar data — to detect upcoming appointments and generate WhatsApp reminder messages
  • Contact information — to send automated WhatsApp reminders via Meta's messaging API
  • Account management — to provide and manage your access to our services
  • Service improvement — to analyze usage patterns and improve our reminder system

We do not use Google user data for any other purpose, including advertising, profiling, or any form of automated decision-making.

4. Data Sharing and Disclosure

We share your data only as necessary to provide our service:

  • Meta (Facebook/WhatsApp) — we send appointment details through Meta's WhatsApp Business API to deliver reminder messages. This includes the recipient's phone number and the selected message template content.
  • n8n (workflow automation) — our internal n8n instance (hosted at srv1715864.hstgr.cloud) processes calendar events and triggers WhatsApp messages.
  • Google — we use the Google Calendar API to read your event data. We comply with the Google API Services User Data Policy.

We do not sell, rent, or trade your personal data to third parties. We do not transfer Google user data to any third party except as described above and only for the purpose of delivering our service.

5. Data Protection Mechanisms

We implement the following measures to protect your data:

  • Encryption in transit — all data transmitted between our servers, Google, Meta, and your browser is encrypted using TLS 1.3.
  • Encryption at rest — your data is stored in a MySQL database on our secure server, accessible only via SSH tunnel or Docker internal network.
  • Access control — only authorized personnel with SSH key access can reach the database. Each user can only see their own data through the dashboard.
  • OAuth 2.0 — Google Calendar and Meta connections are authenticated via OAuth 2.0, ensuring we never store your Google or Meta account passwords.
  • Token management — access tokens are stored encrypted and can be revoked by the user at any time through their Google Account or Meta settings.

6. Data Retention

  • Google Calendar events — we store event data only as long as necessary to send the reminder. Appointment records are retained for up to 12 months after the appointment date.
  • Message templates — retained until you delete them through the dashboard.
  • Account data — retained for the duration of your account and up to 12 months after account closure, unless earlier deletion is requested.

You can request deletion of your data at any time by contacting us at the address below.

7. Your Rights

Under applicable data protection law, you have the right to:

  • Access your personal data held by us
  • Request correction of inaccurate data
  • Request deletion of your data ("right to be forgotten")
  • Object to or restrict processing of your data
  • Request data portability
  • Withdraw consent at any time

To exercise these rights, please contact us using the details below.

8. Compliance with Google API Services User Data Policy

Closira's use and transfer of information received from Google APIs to any other app complies with the Google API Services User Data Policy, including the Limited Use requirements.

9. Third-Party Services

Our service integrates with the following third-party services:

  • Google Calendar API — for reading calendar events. Google Privacy Policy
  • Meta WhatsApp Business API — for sending WhatsApp messages. Meta Privacy Policy
  • n8n — self-hosted workflow automation on our own infrastructure.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:

Closira
Amstelstraat 22
4388RM Oost-Souburg
the Netherlands