Privacy Policy

2.1 Personal Information

Information that identifies or can be used to identify an individual, such as:

• Name
• Email address
• Phone number
• Account credentials

2.2 Usage Data

Automatically collected information about how the Service is accessed and used, such as:

• IP address
• Device information
• Browser type
• Operating system
• Pages visited and time spent

2.3 Cookies and Tracking Technologies

We may use cookies, web beacons, and similar tracking technologies to collect and store usage data.

3.1 Data We Access

When you connect your calendar, we request read-only access. For Google Calendar, we use the calendar.readonly scope. For Microsoft Outlook, we use the Calendars.Read permission. We access the following data:

• Calendar list (names and IDs of your calendars)
• Event ID (unique identifier)
• Event summary (title)
• Event start and end times
• Whether an event is an all-day event

3.2 How Calendar Data Is Used

Calendar data is used exclusively to help you review meetings and log time toward material participation compliance. Calendar events are fetched on demand when you use the review feature and are not permanently stored in our database. We store only a record of which events you have reviewed (event ID, review status, and associated time entry) to prevent duplicate logging.

3.3 Data We Store

We store the following calendar-related data:

• Calendar connection details: your calendar provider, OAuth access and refresh tokens (encrypted), token expiration, and your selected calendar ID
• Event review logs: the event ID, your review decision (added or skipped), and a link to the corresponding time entry if created

3.4 Data Sharing and Disclosure

Your calendar data is not shared with, sold to, or disclosed to any third parties. Calendar data is used solely within the Service to provide material participation tracking functionality to you.

3.5 Data Retention and Deletion

You may disconnect your calendar integration at any time from your profile settings. When you disconnect, your stored OAuth tokens are deleted. Event review logs are retained as part of your compliance records but can be deleted upon request by contacting support@diorama13.com.

3.6 Google API Services User Data Policy

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google Calendar data to provide and improve the material participation tracking features of our Service
• We do not transfer Google Calendar data to third parties unless necessary to provide the Service, as required by law, or with your explicit consent
• We do not use Google Calendar data for advertising or to serve ads
• A human may review your Google Calendar data only with your affirmative consent, for security purposes, to comply with applicable law, or for our internal operations where the data has been aggregated and anonymized