Privacy policy

Updated 12 October 2026

This page explains, in plain language, what data the WS Calendar apps handle and where it is kept. The short version: the workshop's data stays in the workshop's own Google account and on its own devices. Primpex Oy does not receive it and does not store it on its servers.

1. Who is responsible

Primpex Oy (Business ID 2575921-6)
Hämeentie 103, 00550 Helsinki, Finland
Email: info@wscalendar.fi · Phone: +358 40 096 0457

Primpex Oy is the publisher of WS Calendar. If you have any question about this policy or about your data, use the contact details above.

Roles under data protection law. For the data of the workshop's customers, the workshop itself is the controller, and Google acts as its service provider under Google's own terms. Primpex Oy does not process this data on the workshop's behalf and is therefore not its processor, so no separate data processing agreement is needed. Exception: if you send us an error log through the “Report a problem” window, we use it only to fix the problem (section 15).

2. Which apps this policy covers

WS Calendar for Windows — installed from an installer file; later also available from the Microsoft Store.
WS Calendar for Android — the companion app for the workshop's phones and tablets.

There is no iPhone version. The website wscalendar.fi is covered in section 15.

3. Where the data is stored

Everything the app works with is stored in the workshop's Google account and on the workshop's own devices:

Bookings are stored in the workshop's Google Calendar. The details of a booking — customer, car, parts and jobs — are stored in the event's hidden properties, not in the event text.
Shared workshop data is stored in the WSCalendar folder in the workshop's Google Drive: stock, tyre hotel with photos, notes, job templates, resources, the settings file, printed documents, the receipt list and receipt PDFs, and photos attached to bookings.
A local database on each device (customers, cars, receipts, stock, settings) and backups on the computer in Documents\WS Calendar\Backups.

Primpex Oy does not receive this data and does not keep it on its own servers.

4. Our only server component

WS Calendar has one server component: a small service running in Google Cloud. It is used only when you sign in with Google on a Windows computer. It completes the sign-in by adding the app's secret key and forwarding Google's reply back to the program. It stores nothing. The Android app does not use this service.

Update check. The program reads the file beta/version.json from wscalendar.fi to show that a new version is available. No workshop or customer data is sent with this request; like any website, the server sees the IP address.

Revoked licence codes. The program and the Android app read the file beta/revoked.wsr from wscalendar.fi — a public list of revoked licence codes (for example after a refunded purchase). No data is sent; the server only sees the IP address.

5. Access to the Google account and why it is needed

You sign in to WS Calendar with the workshop's Google account. The app asks for the following access:

Google Calendar — to read and edit the workshop's bookings. The calendar is the workshop's shared schedule.
Google Drive (the limited drive.file scope) — only the files the app itself has created. The app cannot see the other files in your Drive.
Google Tasks (Windows only) — the workshop's shared notes and the task list named “WS Calendar” are synced in both directions.

The app uses this access only to provide the features described on this website. You can revoke it at any time in your Google account (see section 12).

6. Google API Services User Data Policy

WS Calendar's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7. Android app permissions

Internet — to reach the workshop's Google Calendar and Google Drive.
Camera — used only when you tap “Take photo”.
Photos are chosen through the Android system picker: the app receives only the photos you select and has no access to the gallery.

The app does not read the employee's personal photos, contacts, email or other accounts.

8. Messages to customers

The app does not send or receive SMS and does not request access to the phone's messages. The “Message to the customer” window only prepares a text (confirming the work, an appointment reminder, the car is ready) and copies it to the clipboard; the employee sends it in whatever way they choose.

Before version 0.4.38 the app had an SMS log. If the workshop used it, the earlier entries remain in the file sms_messages.json in the WSCalendar folder in the workshop's Google Drive and in the app's database on the workshop's devices; newer versions neither read nor show them. The workshop can delete the file itself.

9. The “Task for AI” button

The button copies the booking data — car, jobs, faults and notes — to the clipboard, without the customer's name, phone number or email. The app itself sends nothing to any AI service. Whether to paste the text into a chat is the user's own decision.

10. What the app does not do

No advertising, no analytics, no tracking, no selling or sharing of data with third parties. The error log is kept on the device. It reaches us only if you send it yourself — in a message or by ticking “Attach the error log” in the “Report a problem” window.

11. Security

Sign-in is done with Google (OAuth with PKCE). The app never sees your Google password.
The access key is kept in the operating system's secure storage.
Settings are protected with a PIN code.
On employees' phones there is a mechanic mode that hides customer data.

12. Retention and deletion

Data is kept as long as the workshop keeps it in its own Google account. The workshop can delete it there at any time.
Uninstalling the app deletes its data on that device. Backups in the Documents folder are deleted manually.
You can revoke WS Calendar's access to your Google account at any time in your Google Account: Security → Third-party apps & services (myaccount.google.com/connections). After that the app can no longer read or change your calendar or Drive files; the data itself stays in your Google account.
Erasing an individual customer's data. The workshop is responsible for its own customers' data and carries out a customer's erasure request itself: it deletes the customer from the app's customer list and deletes or edits their earlier bookings in Google Calendar, together with related tyre-hotel entries and photos in Google Drive. Entries of the old SMS log (section 8), if any, are removed by the workshop by deleting the file sms_messages.json. The data disappears from the computer's backups on its own as older copies are replaced by new ones (the latest 30 are kept). Receipts are accounting records: under the Finnish Accounting Act (kirjanpitolaki) they are kept for at least six years from the end of the year in which the financial period ended, and are not deleted before that period is over.
Questions and requests about data: use the Primpex Oy contact details in section 1.

13. Children

WS Calendar is a business tool for car repair workshops. It is not intended for children under 16, and we do not knowingly process children's data.

14. Changes to this policy

Changes are published on this page with a new date.

15. Website wscalendar.fi

Contact form

When you leave your contact details on the website, we process: name, company, email, phone number (optional), number of mechanics and your choice (launch notification or tester). Purpose: to tell you about the launch and early access, and to agree on tester status. Legal basis: your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time by email. The details arrive by email to Primpex Oy; we delete them when you no longer want messages, and at the latest 24 months after sales of the application start.

Cookies and analytics

The website uses no cookies, analytics or ad tracking. Fonts are served from our own server. The hosting server keeps technical logs (e.g. IP address and time) for a short period for security. The form's spam protection stores a hash derived from the IP address for up to one day.

Processors

Hosting and email: Domainhotelli Oy (Finland). Email service: Google (Gmail). Data is not sold or shared for marketing.

Report a problem

When you send a message with the “Report a problem” button in the app, it is stored in Primpex’s Google Forms and Google Sheets: the message text, your contact (if you gave one), the app version and device and — if you ticked the box — the error log. Names, phone numbers, e-mail addresses and licence plates are removed from the log before it is sent. Messages are kept as long as they are needed to fix the problem, at most two years.

Your rights

You have the right to access your data, request rectification or erasure, withdraw consent and object to processing. Send your request to info@wscalendar.fi. You may also lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).