1. Introduction

At AtlasLabs, we are committed to protecting your privacy and handling your data responsibly. This Privacy Policy explains how we collect, use, store, and protect your personal information, including data obtained from Google services when you use our platform.

By using our services, you consent to the collection and use of information in accordance with this policy. We comply with applicable data protection laws and Google API Services User Data Policy.

Google User Data Policy Compliance: The use of information received from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

2. Google User Data Access

Our application accesses the following Google user data through Google APIs:

• Google Account Information: Your email address, unique Google user ID, display name, and profile picture
• Google Calendar Data: Your calendar lists, calendar metadata, and calendar events (including event details, dates, times, attendees, and descriptions)
• Authentication Tokens: OAuth 2.0 access and refresh tokens to maintain secure access to your Google data

We only access the minimum data necessary to provide our calendar management and analysis services. We do not access any other Google services or data beyond what is explicitly listed above.

3. How We Use Google User Data

We use your Google user data for the following specific purposes:

• Service Provision: To display your calendar information, manage calendar events, and provide calendar analysis features
• Authentication: To verify your identity and maintain secure access to our platform
• User Experience: To personalize your dashboard and provide relevant calendar insights
• Technical Operations: To ensure proper functioning of calendar synchronization and data updates

We do not use your Google user data for advertising, marketing to third parties, or any purpose unrelated to providing our core calendar management services.

4. Data Sharing and Disclosure

We do not sell, rent, or share your Google user data with third parties, except in the following limited circumstances:

• With Your Consent: When you explicitly authorize us to share specific data
• Service Providers: With trusted third-party service providers who assist in operating our platform (such as cloud hosting providers), who are bound by confidentiality agreements
• Legal Requirements: When required by law, court order, or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with advance notice to users

Any third parties with access to your data are contractually obligated to maintain the same level of data protection and are prohibited from using your data for their own purposes.

5. Data Protection and Security

We implement comprehensive security measures to protect your Google user data:

• Encryption: Data is encrypted in transit using TLS/SSL and at rest using industry-standard encryption
• Access Controls: Strict access controls limit data access to authorized personnel only
• Secure Storage: Data is stored in secure, SOC 2 compliant cloud infrastructure
• Authentication: Multi-factor authentication and secure token management for all data access
• Regular Audits: Regular security audits and monitoring to detect and prevent unauthorized access
• Data Minimization: We collect and store only the minimum data necessary for service functionality

While we implement robust security measures, no method of transmission over the Internet is 100% secure. We continuously update our security practices to protect your data.

6. Data Retention and Deletion

We retain your Google user data only as long as necessary to provide our services:

• Active Accounts: Data is retained while your account remains active and you continue using our services
• Account Deletion: When you delete your account, we delete your Google user data within 30 days
• Service Termination: If you revoke Google API access, we immediately stop accessing your data and delete stored data within 30 days
• Automatic Cleanup: Expired authentication tokens are automatically purged from our systems
• Legal Requirements: Some data may be retained longer if required by law or for legitimate business purposes (e.g., fraud prevention)

You can request immediate deletion of your data by contacting us at privacy@atlaslabs.com. We will confirm completion of data deletion within 30 days of your request.

7. AI/ML Model Training

We do NOT use your Google user data obtained through Workspace APIs to develop, improve, or train generalized AI and/or ML models.

Specifically:

• Your calendar data, events, and personal information are never used for machine learning model training
• We do not create datasets from your Google user data for AI development purposes
• Your data is used solely for providing direct services to you, not for broader algorithmic improvements
• Any analytics or insights provided are generated using your data exclusively for your benefit

This commitment ensures your personal data remains private and is not used to benefit other users or third parties through AI/ML model improvements.

8. Your Rights and Controls

You have the following rights regarding your Google user data:

• Access: Request a copy of the data we have collected about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your data at any time
• Data Portability: Request your data in a machine-readable format
• Revoke Access: Revoke our access to your Google account through Google Account settings
• Limit Processing: Request limitations on how we process your data

To exercise these rights, contact us at privacy@atlaslabs.com. We will respond to your request within 30 days.

9. Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us:

We are committed to resolving any privacy concerns promptly and transparently. This Privacy Policy may be updated periodically, and we will notify users of significant changes.