Privacy Policy

Information We Collectlink

When you sign in with Google, we receive the following Google user data via the basic profile OAuth scope: your name, email address, and profile picture. This is the only Google user data we access. We do not request or receive access to your Google Calendar, Gmail, Google Drive, or any other Google service.

We also collect anonymous usage data such as the number of calendar syncs and releases tracked, which we use solely to improve the service.

How We Use Your Informationlink

Your email address is used to identify your account and associate your calendar sync preferences. We do not sell, trade, or rent your personal information to third parties.

Your data is used exclusively to: • Provide and maintain the Release-Cal service • Send you service-related notifications (if you opt in) • Improve and develop new features

What We Never Dolink

We are committed to responsible data use. We will never:

• Sell, rent, or transfer your Google user data to third parties • Use your data for targeted advertising or serve you ads based on your information • Use your data for credit assessments or financial profiling • Use your data to train artificial intelligence or machine learning models • Share your data with data brokers or analytics platforms for commercial purposes • Transfer your Google user data to any third-party AI/ML service • Use your Google user data for any purpose unrelated to providing or improving the Release-Cal service

Limited Use Compliance Statement: Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Calendar Datalink

Release-Cal generates ICS calendar subscription feeds. These feeds contain public music release information only — no personal data is included in these feeds.

When you subscribe to a calendar feed, your calendar application (Google Calendar, Apple Calendar, etc.) periodically fetches the feed from our servers. We log standard web server access logs (IP address, timestamp, user agent) for these requests, which are retained for 30 days.

Google OAuthlink

We use Google OAuth solely for authentication — to verify your identity and create your account. We do not request access to your Google Calendar, Gmail, or any other Google services beyond your basic profile information.

You can revoke our access at any time by visiting your Google Account permissions page at myaccount.google.com/permissions.

Google User Datalink

This section provides specific disclosures about how we handle Google user data in compliance with Google API Services policies.

Data Access We access only the following Google user data: your name, email address, and profile picture. This data is received through the basic Google profile OAuth scope (openid, email, profile). No other Google user data — including Google Calendar events, Gmail messages, Drive files, or Workspace data — is accessed.

Data Use Your Google user data (name, email address, profile picture) is used exclusively to: authenticate your identity and create your Release-Cal account, display your name and picture within the app, and associate your calendar preferences with your account. It is not used for any other purpose.

Data Transfer We do not share, sell, transfer, or disclose your Google user data to any third parties, except as required by law. Your data is not transferred to data brokers, advertisers, or AI/ML service providers.

Data Protection Google user data is stored in encrypted form at rest and transmitted exclusively over TLS-encrypted connections. Access is restricted to authorised systems only. See the Data Security section for full details.

Data Securitylink

We take the security of your personal information seriously. Security procedures are in place to protect the confidentiality of your data, including:

• All data transmitted between your browser and our servers is protected using TLS (Transport Layer Security) encryption. • Sensitive information, such as authentication tokens and session data, is encrypted at rest. • Access to stored user data is restricted to authorised systems and personnel only. • We regularly review our security practices to ensure your data remains protected.

While we implement these safeguards, no method of transmission over the internet or electronic storage is 100% secure. We encourage you to use strong, unique passwords and to contact us immediately if you suspect unauthorised access to your account.

Data Retention & Deletionlink

We retain your account information (name, email address, profile picture) for as long as your account is active or as needed to provide the service.

Data Deletion: If you wish to delete your account and all associated Google user data, contact us at albumtalks@yahoo.com. We will permanently delete your data within 30 days of receiving your request. You may also revoke our Google OAuth access at any time via myaccount.google.com/permissions, which immediately prevents us from receiving any further Google user data.

Web server access logs (IP address, timestamp, user agent) generated by calendar feed requests are retained for 30 days and then automatically deleted.

Cookieslink

We use a single session cookie to keep you signed in. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

Changes to This Policylink

We may update this privacy policy from time to time. We will notify you of significant changes by updating the date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.

Contactlink

If you have any questions about this privacy policy or your data, contact us at: albumtalks@yahoo.com