Your calendar,
your right.
Last reviewed: March 2026
The short version
LookOut is legal. You're accessing your own calendar data, in your own browser, with your own credentials. No laws are broken. No systems are hacked. No data leaves your device.
Below is a plain-English breakdown of the legal framework that makes this possible — from Supreme Court precedent to EU data rights.
Your data, your right
Your calendar is yours. The meetings you attend, the schedule you keep, the events that shape your workday — you created that data and you have the right to access, export, and use it however you choose.
Under the EU's General Data Protection Regulation (GDPR, Article 20), individuals have an explicit right to receive their personal data in a portable, machine-readable format and transfer it to another service. This isn't a loophole — it's a recognized legal principle.
LookOut acts as a bridge: it reads calendar data from your authenticated Outlook session and writes it to your Google Calendar via the official Google Calendar API. No intermediary. No middleman. Just your data, moving where you want it.
What the law says
The primary US law governing computer access is the Computer Fraud and Abuse Act (CFAA). In Van Buren v. United States (2021), the Supreme Court drew a clear line: accessing information you are already authorized to access cannot constitute "exceeding authorized access" under the CFAA — even if a terms-of-service document says otherwise. The Department of Justice reinforced this in 2022, confirming that ToS violations on consumer websites are not prosecutable offenses.
You are the authenticated account holder. You are authorized to see your calendar. LookOut reads the same data your browser is already displaying.
Terms of service are not laws. They are contracts between you and Microsoft. Violating a ToS may, in theory, affect your account relationship — but that is a civil contractual matter, entirely distinct from criminal or regulatory liability. Courts have consistently upheld this distinction.
Privacy by design
LookOut's architecture is its privacy policy. There is no server. No database. No developer account to create. Your calendar data flows directly from Outlook to Google Calendar within your browser. The developer never sees, stores, or processes your data at any point.
Because LookOut never receives personal data, there are no data controller obligations under GDPR. Nothing to breach, nothing to report, nothing to audit. The privacy guarantee is structural — it cannot be violated by a server breach, a policy change, or a company acquisition, because there is no server.
This is meaningfully different from cloud-based sync tools that route your data through their own servers. With LookOut, the data path is direct: Outlook → your browser → Google Calendar.
Your rights as an employee
In the United States, Section 7 of the National Labor Relations Act (NLRA) protects employees' right to discuss and retain information about their own working conditions — including their schedules. Your right to keep a record of when you're expected to work is protected under federal labor law.
Beyond that, predictive scheduling laws in New York City, Chicago, Seattle, Philadelphia, Oregon, and other jurisdictions now require employers to provide schedules in advance and in writing. LookOut helps you exercise that right in a more useful format.
If your employer's policies discourage you from tracking your own schedule, those policies may themselves conflict with applicable labor law. Retaining and organizing your own working hours is not a subversive act — it is a recognized legal right.
Important disclaimers
- This page is informational, not legal advice. Consult qualified counsel for your specific situation.
- Microsoft's and Google's terms of service are your responsibility. Review the terms applicable to your accounts.
- Laws vary by jurisdiction. This analysis focuses on US federal law and EU/GDPR frameworks.
- LookOut is an independent tool — not affiliated with, endorsed by, or associated with Microsoft or Google.
Questions about the legal basis? Reach out via our contact page.