# Calendly privacy rating

Hosted scheduling service that lets people book meetings through a shared link based on the host's calendar availability. Connects to Google, Outlook and iCloud calendars and video conferencing tools.

## Summary

Calendly scores 25 out of 100 (grade F) on the scheduling criteria. It meets 1 of 8 criteria: TLS configuration. It partly meets no ads or data sales and independent audit. It does not meet open source, no trackers or telemetry, transparency report, tells users about requests and security headers. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade C.

- Website: https://calendly.com
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Platforms: Web, Android, iOS, macOS
- Home page trackers: Google Tag Manager
- Category: [Scheduling](https://privacyratings.com/scheduling/)
- Grade: F (25/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | No | Uses Google Analytics and advertising trackers such as Facebook Pixel, Clearbit and MNTN. | https://calendly.com/legal/privacy-notice |
| No ads or data sales | Partial | Funded by subscriptions with no ads in the product, but identifiers and browsing activity are shared with targeted advertising partners. | https://calendly.com/legal/privacy-notice |
| Independent audit | Partial | Calendly lists SOC 2 Type 2, SOC 3 and ISO 27001 audits, but the reports are only shared through its trust center. | https://calendly.com/security |
| Transparency report | No | No transparency report or government request policy is published. |  |
| Tells users about requests | No | No published policy on notifying users about data requests. |  |
| TLS configuration | Yes | Grade A+ | https://www.ssllabs.com/ssltest/analyze.html?d=calendly.com&hideResults=on |
| Security headers | No | Grade C (55/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=calendly.com |
| Modern web standards | Not tested yet | Not tested yet. |  |

Source: https://privacyratings.com/scheduling/calendly/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/scheduling/calendly.md