DATA USE

What your import sends.

Effective September 30, 2026.

Who operates CalendarDrop

Joshua Penner operates CalendarDrop as an individual. For privacy questions or an account-deletion request, email josh@pennerstrategy.com.

What an import sends

Your WordPress site sends the source you choose, its timezone, date context, site identity and an authentication token to CalendarDrop. CalendarDrop sends that source and extraction instructions to Google's Gemini API. Event details return to WordPress for draft creation.

This connection does not browse unrelated pages or read other posts on your site. Hosted processing does not collect your own AI provider key. Submit only material you are entitled to process, and do not include secrets or confidential personal records.

Records CalendarDrop keeps

The service keeps your account email, connected site address, hashed access tokens, billing and license identifiers, verified payment status, usage and import outcomes. It keeps extracted event results so interrupted imports can be retried safely.

The service database does not save the raw submitted image, PDF or source text. CalendarDrop does not store card numbers or the original Polar license key. It stores license identifiers and a hash of the key. Your own WordPress site can retain uploads, drafts, source details and import logs under its settings and backups.

Retention and deletion

Completed and other resolved result contents become eligible for removal after 30 days without a relevant update. Routine daily maintenance removes eligible results. Results awaiting processing or delivery confirmation remain until the import is resolved.

Account, billing and usage records are kept separately and currently have no automatic deletion schedule. Contact us to request account deletion. We review requests and may need to retain records for account security, billing, refunds or legal obligations.

Service backups keep verified snapshots from the latest 14 days and at least the three latest snapshots. The minimum of three can retain older data longer. Removing information from the active database does not immediately remove it from backups or another provider's records. We do not promise that every copy is erased after 30 days.

Providers involved

• Render hosts the CalendarDrop service and its database.
• Resend delivers sign-in links and service email.
• Google Gemini processes the event material submitted for hosted extraction.
• Polar handles checkout, payment methods, subscriptions and the connection license. CalendarDrop shares the account and customer information needed for checkout or billing and validates the license and connected site with Polar.

Hosted processing uses the billing-enabled Gemini API. Google's paid-service terms say prompts and responses are not used to improve its products. Google's abuse-monitoring documentation describes 55-day retention of prompts, context and outputs, with possible review by authorized personnel. This is not a zero-retention service. See the Gemini API terms, Google's abuse-monitoring policy and Polar's privacy policy.

Using your own key

In the free own-provider-key mode, requests use the provider configured in WordPress. CalendarDrop hosted processing is not required. The plugin stores your key in your site's database, so hosting access and backups matter. Your provider's terms and account tier determine how it handles those requests.

Cookies and questions

The service uses a session cookie for sign-in. CalendarDrop's service pages contain no advertising or third-party analytics scripts. Providers such as Polar have their own policies for their websites.

Email josh@pennerstrategy.com with questions or a deletion request. Do not include passwords, API keys or confidential source documents.