Privacy Policy

At BusyHub, we believe your time and your data are deeply personal. This Privacy Policy outlines what information we collect, how we use it, and your rights.

1. What We Collect

• Your email address (used for identification)
• Your Google Calendar events: title, start/end times, and recurrence info
• Basic usage metadata: event counts, streaks, and visualization data

2. How We Use Your Data

Your calendar data is used solely to generate your personal heatmap and event insights. We do not sell, rent, or analyze your personal events beyond what's needed for visualization.

3. Data Storage & Security

We do not store your calendar data in any database. All processing happens in-memory, temporarily, and only during your active session. Once you leave the page, the data disappears.

4. Data Sharing & Third-Party Services

We share your data with the following third-party services solely to provide our service:

• Google OAuth & Calendar API: We access your calendar events using Google's secure OAuth 2.0 system with read-only permissions (scope: https://www.googleapis.com/auth/calendar.events.readonly). Google's privacy policy applies to this data access.
• OpenAI API: Anonymous calendar event patterns (no personal identifiers, event titles, or attendee information) may be sent to OpenAI's API to generate insights about your productivity patterns. OpenAI's privacy policy applies to this processing.
• Vercel (Hosting & Analytics): Our application is hosted on Vercel. Anonymous usage analytics are collected to improve our service (no personal calendar data is included). Vercel's privacy policy applies.

We do not sell, rent, or share your personal calendar data with any other third parties. Data sharing is limited to what's necessary to provide the service functionality.

5. Data Protection & Security Mechanisms

We implement multiple layers of security to protect your sensitive calendar data:

• OAuth 2.0 Authentication: We use Google's secure OAuth 2.0 system with read-only calendar permissions. We never store your Google credentials.
• HTTPS Encryption: All data transmission between your browser and our servers is encrypted using industry-standard TLS/SSL protocols.
• No Persistent Storage: Your raw calendar data is processed in-memory only and is never stored in databases or files on our servers.
• Token Security: OAuth access tokens are securely stored in encrypted session cookies with secure flags and same-site policies.
• Data Anonymization: When generating AI insights, only anonymized patterns are processed (no event titles, attendees, or personal details).
• Limited Data Retention: AI analysis results are cached in-memory for maximum 3 days to improve performance, then automatically deleted.
• Access Controls: Your data is only accessible during your authenticated session and is never shared between users.

6. Your Rights

• Revoke Access: You can revoke BusyHub's access to your calendar at any time via your Google Account settings (myaccount.google.com/permissions)
• Data Deletion: Since we don't store your calendar data, disconnecting your account automatically removes all access to your information
• Access Information: You can request information about any cached analysis data by contacting us
• Data Portability: Your calendar data remains in your Google account and can be exported using Google Takeout

7. Data Retention

Calendar Data: We do not retain your raw calendar data. It's processed in real-time and discarded after each session.

AI Analysis Cache: Anonymized analysis results may be cached in-memory for up to 3 days to improve performance, after which they are automatically deleted.

Session Data: Login sessions expire after 30 days of inactivity.

8. Cookies & Tracking

We use minimal cookies and tracking:

• Essential Cookies: Required for login sessions and security (NextAuth.js session cookies)
• Analytics: Anonymous usage analytics via Vercel Analytics (no personal identifiers or calendar data)

9. Changes to This Policy

We may occasionally update this Privacy Policy. Changes will be reflected by the "Last Update" date.

10. Contact

For questions or concerns, email us atdetoledo.denis@gmail.com

Last Update: August 2025