Privacy Policy

Introduction

Welcome to GCalSync. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our calendar synchronization service.

Information We Collect

Account Information

When you create an account, we collect:

• Your email address
• Authentication credentials (managed securely through Google OAuth)
• Profile information from your Google account (name, profile picture)

Calendar Data

To provide our synchronization service, we access:

• Calendar metadata (calendar names, IDs, colors)
• Event information (titles, dates, times, descriptions, attendees, locations)
• Calendar permissions and sharing settings

Usage Information

We automatically collect:

• Log data (IP address, browser type, access times)
• Sync activity and preferences
• Error reports and performance data

How We Use Your Information

We use your information to:

• Provide and maintain our calendar synchronization service
• Sync events between your connected calendars according to your preferences
• Send you service-related notifications and updates
• Improve and optimize our service
• Detect and prevent technical issues and security threats
• Comply with legal obligations

Data Storage and Security

We implement industry-standard security measures to protect your data:

• All data is encrypted in transit using TLS/SSL
• Calendar access tokens are stored securely and encrypted at rest
• We use secure authentication through Google OAuth 2.0
• Access to your data is restricted to essential service operations only
• We regularly review and update our security practices

Your calendar data is stored securely in our database for as long as you maintain an active account. We do not read, analyze, or share your calendar events for any purpose other than providing the synchronization service you requested.

Data Sharing and Third Parties

We do not sell, rent, or share your personal information with third parties except:

• Google: We use Google Calendar API to access and sync your calendars. Your data is subject to Google's Privacy Policy.
• Service Providers: We use trusted service providers for hosting, authentication, and database services (e.g., Supabase). These providers are contractually obligated to protect your data.
• Legal Requirements: We may disclose information if required by law or to protect our rights and safety.

Your Rights and Choices

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct your information
• Deletion: Delete your account and all associated data
• Revoke Access: Disconnect calendars or revoke Google Calendar permissions at any time
• Export: Download your sync configurations and settings

To exercise these rights, you can manage your settings in your dashboard or contact us directly.

Data Retention

We retain your information for as long as your account is active or as needed to provide our services. When you delete your account:

• All calendar access tokens are immediately revoked
• All synced events created by GCalSync are deleted from your calendars
• Your account data is permanently deleted within 30 days
• Some log data may be retained for up to 90 days for security and legal purposes

Google API Services User Data Policy

GCalSync's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use your Google Calendar data to provide the calendar synchronization service you requested, and we do not use it for any other purpose.

Cookies and Tracking

We use essential cookies and similar technologies to:

• Maintain your login session
• Remember your preferences
• Ensure security and prevent fraud

We do not use advertising cookies or track your activity across other websites.

Children's Privacy

GCalSync is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in compliance with applicable data protection laws.

Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

Contact Us

If you have any questions about this privacy policy or our data practices, please contact us at:

Email: privacy@gcalsync.io

For general inquiries: contact@gcalsync.io