Sure thing, the company doesn't tell where it's located and there is also no privacy statement. But: since yesterday, they support "OAuth", meaning you don't have to tell them your password anymore. You simply grant access to your calendar. And with one click (in your Google account) you can revoke this.
Still, it's not perfect regarding privacy, but it's also not such a super-huge-great risk anymore as your password remains secret.
It is safer than other sites that let you check your contacts automatically by handing them out your credentials for your Google account.
Chris