Privacy Policy

Who we are

Schedule Assist ("we", "us") is a calendar synchronization service operated by The Agile Good Life. It lets you connect two or more Google accounts and keep selected calendars in sync with each other. This policy explains exactly what data we access, why we access it, how long we keep it, and how you can remove it.

Google data we access, and why

When you connect a Google account, we request the following OAuth scopes. We request nothing beyond these.

What we store

• Account details — your email address and profile name.
• OAuth tokens — the access and refresh tokens for each connected Google account, so sync can run in the background without you signing in each time.
• Calendar and sync configuration — the IDs and names of the calendars you choose to sync, and the sync groups you create.
• Event mappings — the Google event ID of each source event and the ID of the copy we created, so we can keep them in step and avoid duplicates.
• Sync audit records — for each sync operation we record details of the event involved, including its title, description, location, start and end times, recurrence rule, attendee list, and a copy of the event payload returned by Google. We use these records solely to diagnose sync failures and to prevent duplicate or incorrect events.

How we use your data

We use your Google data for one purpose: to provide the calendar synchronization you have asked for, and to support and troubleshoot it. We do not use it for advertising. We do not sell it. We do not use it to train machine learning or AI models. We do not transfer it to third parties except as described below.

Google API Services Limited Use disclosure

Schedule Assist's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Who we share it with

We use a small number of infrastructure providers to run the service. They process data on our behalf and are not permitted to use it for their own purposes:

• Supabase — database and authentication hosting.
• Vercel — application hosting.
• Google — the Calendar API itself.

We may also disclose data where required by law. We do not otherwise share your calendar data with anyone.

Retention and deletion

We keep your data for as long as your account is active. When you disconnect a Google account, we delete its stored OAuth tokens and stop accessing that account. When you delete your Schedule Assist account, we delete your account record, your connections, your sync configuration, your event mappings and your sync audit records.

You can revoke our access at any time, independently of us, from your Google account permissions page. Revoking access stops all further synchronization immediately.

Information about other people

Calendar events often contain details about people other than you, such as the email addresses of attendees. Where we process that information, we do so only to carry out the synchronization you have configured, and it is subject to the same protections, retention rules and deletion rights described in this policy.

Security

Data is stored in Supabase (PostgreSQL) with row-level security policies restricting each user's data to that user. Traffic is encrypted in transit over HTTPS. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

Your rights

You may request access to the data we hold about you, ask us to correct it, or ask us to delete it. Contact us at the address below and we will respond within 30 days.

Changes to this policy

If we make material changes to how we handle your data, we will update this page and revise the date at the top. Significant changes affecting how we use Google user data will be communicated to you directly.

Contact

Questions about this policy or about your data: moe@theagilegoodlife.com