Get a demo

Privacy Policy

Privacy Policy — Equipo Last updated: 18 June 2026


1. Who we are

Equipo is operated by Equipo BV, Ottergemsesteenweg Zuid 808 b300, Belgium (BE0699.822.633). For privacy-related questions, contact us at support@getequipo.com.


2. What data we collect and why

Data Purpose Legal basis
Name, work email, company name Account creation and login Contract performance (Art. 6.1.b)
Google account identifier Google OAuth login Contract performance (Art. 6.1.b)
Google Calendar data Calendar sync features Contract performance (Art. 6.1.b)
Microsoft account identifier Microsoft OAuth login Contract performance (Art. 6.1.b)
Usage and activity data Platform operation and improvement Legitimate interest (Art. 6.1.f)
Server log files (IP, browser, timestamps) Security and fraud prevention Legitimate interest (Art. 6.1.f)
Email address Service and product communications Contract performance (Art. 6.1.b)

We do not use your data for advertising. We do not sell personal data.

3. Google user data

When you connect your Google account to Equipo, we request access to:

  • Google identity — your name, email address, and profile photo, to create and identify your Equipo account.
  • Calendar list (read) — to let you choose which calendar to sync with Equipo.
  • Calendar events (read/write) — to keep your Equipo tasks and deadlines in sync with Google Calendar.
  • Free/busy availability (read) — to suggest scheduling times when you and your teammates are available.

We only access Google data needed for these features. We do not sell Google user data, use it for advertising, or share it with third parties except as required to provide these features or by law.

Equipo’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Who receives your Google data

Your Google user data is processed exclusively within Equipo’s platform, hosted by Replit, Inc. (United States), which acts as our infrastructure processor under Standard Contractual Clauses. No other third parties receive, access, or process your Google user data. We do not share Google user data with advertisers, analytics providers, or any other parties.

Protection of Google user data

Google Calendar data is transmitted exclusively over encrypted connections (TLS/HTTPS). It is stored on infrastructure protected by access controls and encryption at rest, and is accessible only to authenticated Equipo users for their own account. We apply the principle of data minimisation — we store only the calendar identifiers and event references necessary to maintain sync, not full calendar content.

Disconnecting your Google account

You can disconnect your Google account at any time from Equipo Settings. This immediately revokes our Calendar access and deletes all stored calendar connection data from our systems. Deleting your Equipo account removes all stored Google data.

4. Microsoft user data

When you sign in with Microsoft, we receive your name, email address, and Microsoft account identifier solely to create and identify your Equipo account. We do not currently access Microsoft Calendar or other Microsoft 365 data.


5. Cookies

Equipo uses only functional cookies required for the platform to operate, specifically for session management and authentication state. We do not use advertising cookies or third-party tracking.

6. Data retention

Data type Retention period
Account data Duration of account + 30 days after deletion
Google Calendar sync references Until Google account is disconnected, or account deleted
Server logs 90 days
Backup snapshots Maximum 30 days

7. Sub-processors and international transfers

We use the following third-party processors to operate Equipo. Where processors are located outside the EEA, transfers are governed by the mechanisms listed below.

Processor Role Location Transfer mechanism
Replit, Inc. Application hosting United States Standard Contractual Clauses (SCCs)
Plus Five Five, Inc. (Resend) Transactional email United States Standard Contractual Clauses (SCCs) + EU-U.S. Data Privacy Framework
Google LLC OAuth login and Calendar API United States EU-U.S. Data Privacy Framework
Microsoft Corporation OAuth login United States EU-U.S. Data Privacy Framework

All processors are bound by GDPR-compliant data processing agreements.

8. Your rights under GDPR

You have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — request correction of inaccurate or incomplete data
  • Erasure — request deletion of your data, under certain conditions
  • Restriction — request that we limit processing of your data
  • Portability — request your data in a portable format
  • Object — object to processing based on legitimate interest

To exercise any right, contact support@getequipo.com. We will respond within one month.

You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit): gegevensbeschermingsautoriteit.be or your local supervisory authority.


9. Children

Equipo is a professional B2B platform not directed at children. We do not knowingly collect personal data from persons under 16. If you believe a minor has provided data through our platform, contact us immediately at support@getequipo.com and we will delete it promptly.


10. Changes to this policy

We will notify active users by email of any material changes before they take effect. The current version is always available at getequipo.com/privacy-policy.