Why your scheduling tool is someone else's data pipeline
The case for privacy-first alternatives in a post-GDPR world — and what we learned building PodCal on Solid Pods.
Every time you send a Calendly link, you’re handing a third party your meeting data, your contacts’ email addresses, and a behavioural profile of when and how often you meet people.
Most scheduling tools store this data indefinitely, on servers you don’t control, in jurisdictions you didn’t choose. For European organisations subject to GDPR, this isn’t just a privacy concern — it’s a compliance risk hiding in plain sight.
The problem isn’t the feature — it’s the architecture
Scheduling tools are remarkably similar to calendar apps. Both poll for updates from a time-series format. Both need to know your availability. The difference is where the data lives.
With traditional tools, your data lives on their servers. They see who you meet, how often, and when. They can build behavioural profiles. They can share analytics with third parties.
What we built instead
PodCal takes a fundamentally different approach. Your scheduling data lives in a Solid Pod — a personal data store based on the W3C decentralised data standard created by Tim Berners-Lee.
We can’t see your meetings. We can’t build profiles. We can’t share data with anyone — because we never have it.
Key design decisions:
- Solid Pod storage — your data stays in your pod, encrypted and portable
- EU-hosted on Scaleway — no transatlantic data transfers
- Open source under MIT — audit the code yourself
- AI-assisted development — we built the entire platform using AI coding tools, proving that privacy-first doesn’t have to mean slow-to-market
What this means for your organisation
If you’re a DPO, a compliance officer, or simply someone who takes data sovereignty seriously — the tools you choose matter. Every SaaS product that centralises user data is a potential liability under GDPR.
The alternative isn’t going back to email chains. It’s choosing tools that are architecturally incapable of misusing your data.
The best privacy tool isn’t one that promises not to look at your data — it’s one that never has it in the first place.
Zero Limit builds and advises on privacy-first technology. Get in touch to discuss your data privacy challenges.