Legal

Privacy Policy

Last updated: 15 October 2026.

Who we are

The Finance Calendar API is operated by Search Ventures Pty Ltd (ACN 639 906 353), an Australian company, as trustee for the Ahlgren Trust (“we”, “us”). This policy explains how we handle personal information collected through financecalendarapi.com, including the dashboard, and the API at api.financecalendarapi.com (together, the “Service”).

We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth). If you are a customer’s employee or contractor using the Service for your organisation, our Data Processing Addendum also applies.

Information we collect

Information you give us

Account details. Your email address. You sign in with a one-time link sent to it; there is no password.
Billing details. Your name, billing address and, if you give it, your business tax ID (such as an ABN or VAT number), collected by Stripe at checkout so we can issue invoices. Your card details go to Stripe and never reach us.
API key labels. The names you give your keys.
Messages to us. Your name, email address, the topic you choose and your message when you use the contact form, and the country your connection comes from.
Waitlist. If you joined our waitlist before accounts launched: your email address, the use case you chose, the page you signed up on, the sentence shown beside the form and the time.

Information collected automatically

Sign-in records. When you request a sign-in link we record the time and the IP address it was requested from. Links expire after 15 minutes and are deleted once expired.
Sessions. When you sign in we store a record of the session so the dashboard knows it is you. It expires after 30 days, or when you log out.
API usage. We count the requests made with your keys each month, to apply your plan’s quota, and record when each key was last used.
Request logs. Our hosting provider records technical details of each request to the Service, such as the IP address, time, path, response code and browser type. The query string of an API request, which holds its parameters and can hold an API key, is removed before it is logged. We also use IP addresses to apply rate limits. These logs are kept for a short period to run and secure the Service.
Bot protection. The contact form may use Cloudflare Turnstile to tell people from bots. It processes signals from your browser for that purpose only.

Cookies and browser storage

The dashboard sets one cookie, fc_session, to keep you signed in. It cannot be read by page scripts and is only sent over secure connections. The website also stores your light or dark theme choice, and for the current visit whether you are signed in and which plan you picked, in your browser. We use no advertising, analytics or tracking cookies.

Credentials

API keys, sign-in links and sessions are stored only as one-way hashes, so we cannot see or recover them.

The calendar data

The holiday and business-day data in the Service is about dates, not people, and contains no personal information.

How we use information

We use personal information to:

provide the Service: sign you in, answer API requests, apply your plan’s limits and show your usage
take payment, issue invoices and tax invoices, and manage your subscription
send service messages, such as sign-in links, usage warnings at 80% and 100% of your monthly requests, and changes to our terms or this policy
answer your questions and support requests
keep the Service secure and working, and investigate misuse
meet our legal obligations, including tax record-keeping

We do not sell, rent or trade personal information, and we do not use it for advertising.

We share personal information only with the service providers that run parts of the Service for us, and only as much as they need:

Provider	What they do for us	Where
Stripe	Payments, subscriptions, invoices and the billing portal	United States and other countries
Cloudflare	Hosting, database, email delivery and bot protection	Global network, including Australia and the United States

We may also disclose information where the law requires it, or to protect the Service and its users from fraud or misuse.

Information held overseas

Because Stripe and Cloudflare operate internationally, your information may be stored or processed outside Australia, including in the United States. We use providers that protect personal information to standards comparable with the Australian Privacy Principles.

How we protect it

All traffic to the Service is encrypted in transit. API keys, sign-in links and sessions are stored only as one-way hashes. Account and billing requests are accepted only from our website. Access to our systems is limited to the people who run the Service. Our Security page has the details.

How long we keep it

Account, keys and settings: while your account exists. When you ask us to delete your account, we delete them within 30 days.
Sign-in links: deleted once expired, within a day. Sessions: deleted once expired or logged out.
Usage counts: while your account exists, to show your usage and answer billing questions.
Billing and invoice records: for as long as Australian tax law requires, currently five years, by us and by Stripe.
Request logs: a short period set by our hosting provider, measured in days.
Contact form messages: as long as needed to deal with your enquiry and any follow-up.
Waitlist entries: until you remove your address, which you can do below.

Your rights

You can ask us to:

tell you what personal information we hold about you and give you a copy
correct information that is wrong, out of date or incomplete
delete your account and the information stored under it

Send requests through the contact form, choosing “Privacy or data request”, or by post to the address below. We will respond within 30 days. We may need to confirm your identity first.

If you are in the European Union or the United Kingdom, you also have the rights given by the GDPR, including to object to processing and to receive your data in a portable form. We process your information to perform our contract with you, to meet legal obligations, and for our legitimate interest in running and securing the Service. You can complain to your local data protection authority.

Complaints

If you have a concern about how we have handled your personal information, contact us first and we will try to resolve it. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC): oaic.gov.au, phone 1300 363 992.

Changes to this policy

We may update this policy. When we do, we will change the date at the top of this page, and if a change materially affects how we handle your information we will tell account holders by email.

Contact

Search Ventures Pty Ltd (ACN 639 906 353) as trustee for the Ahlgren Trust, trading as Finance Calendar API

Online: the contact form
Post: PO Box 255, Bli Bli QLD 4560, Australia

Remove your address from the waitlist

Enter it here. If it's on the list, it's deleted straight away.