Privacy Policy

1. Who we are

CCSync (CardCalSync) is a service for synchronizing calendars, contacts and emails between different accounts (Microsoft 365, Google, iCloud, etc.).

Data controller: Marc André Reverdin — VAT IT17458801002 | Corso Vittorio Emanuele II 154, 00186 Rome, Italy — contact@ccsync.eu

2. Data we collect

GDPR — Article 13

Account data

Email address and name of the connected account
OAuth authentication tokens (encrypted, stored on our servers)
Sync preferences (selected calendars, direction, interval)

Synchronized data

Calendar events (title, date, location, description according to your privacy settings)
Contacts (name, email, phone, address)
Email headers (if email sync is enabled)

      CCSync does not read, store or sell the content of your personal data. Data only transits to be copied from one account to another according to your rules.
    

3. Purpose of processing

Synchronization: transferring your data between your own accounts
Authentication: maintaining the connection to your third-party accounts via OAuth
Technical logs: diagnosing sync errors (kept for 30 days)

Legal basis: contract performance (Art. 6.1.b GDPR) and legitimate interest for technical logs (Art. 6.1.f GDPR).

4. Data sharing

Your data is never sold or shared with third parties for commercial purposes.

CCSync accesses your third-party accounts (Microsoft, Google, Apple) solely to perform the synchronization you configured. This access is governed by the respective providers' terms.

5. Storage and security

Data hosted in the European Union (dedicated server, Germany)
Connections encrypted with TLS 1.3
OAuth tokens stored securely, never accessible in plaintext
No sync data is retained beyond the duration of the session

6. Your rights (GDPR)

Under the GDPR, you have the following rights:

Access: obtain a copy of your processed data
Rectification: correct inaccurate data
Erasure: delete your account and all your data
Portability: export your data in a standard format
Objection: object to specific processing
Restriction: restrict processing in certain cases

To exercise these rights: privacy@ccsync.eu — response within 30 days.

You may also contact the CNIL (France) or your local data protection authority.

7. Cookies and audience measurement

CCSync uses no tracking cookies for user authentication. A local session may be used to keep you signed in to the interface.

Cookieless audience measurement

This site uses Umami Analytics to measure audience in a cookieless way — no tracking cookies. Umami generates temporary identifiers based on IP address and browser fingerprints, making the analytics GDPR-compliant without prior consent. Audience data is hosted in the European Union and never sold to third parties. This analysis is exempt from consent under EU cookie law.

8. Changes

Any significant change to this policy will be notified by email with 30 days' notice. The update date is shown at the top of this page.