Privacy policy

Google Tasks to Notion Sync ("the Service") synchronises tasks between a Notion database you choose and a Google Tasks list it creates for you. This policy explains exactly what it stores, why, and how to get rid of it. The Service is operated by the operator of https://gcal-notion-sync.fleb.us ("we"), who is the data controller for this deployment.

What we access, and why

When you sign in, you grant these Google OAuth scopes:

• openid, email, profile — to identify your account and show who is signed in.
• https://www.googleapis.com/auth/tasks — to create, read, update and delete tasks. This is the scope that does the actual work.
• https://www.googleapis.com/auth/drive.appdata — to store your settings in your Drive's hidden application-data folder. This scope grants no access to any other file in your Drive; we cannot read your documents.

Connecting Notion grants the Service access to the pages and databases you select during Notion's own authorisation step, and to nothing else in your workspace.

What we store

On our servers (Deno KV):

• Your Google account identifier, email address, name and profile picture URL.
• Google and Notion OAuth tokens, including refresh tokens, so the sync can run while you are not signed in.
• Your Notion workspace identifier, name and icon.
• The mapping between Notion pages and Google tasks — page ids, task ids, and the last synchronised title, date and task notes of each. Task titles therefore reach our storage, and so does the notes field, which contains the page link and a plain-text copy of the page body.
• A cache of each synchronised page's body, rendered to plain text, kept so an unchanged page is not re-fetched on every sync. Entries expire on their own once a page stops being synchronised, and disconnecting deletes them immediately.
• Sync status: run timestamps, counts, and recent errors, conflicts and notes. These can include task titles, because a conflict is not diagnosable without the name of the task it is about.
• A signed session cookie identifier, so you stay signed in.

In your own Google Drive, in the hidden application-data folder that only this app can see: your configuration, and an optional snapshot of the mapping above. That folder is yours; deleting the app's data from your Google account deletes it.

What we do not do

• We do not sell or rent your data, and we do not serve advertising.
• We do not use your Google user data to train, or improve, generalised artificial-intelligence or machine-learning models.
• We do not read your data by hand except where you have asked us to investigate a specific problem, or where the law requires it.
• We do not use analytics, tracking pixels or third-party cookies. The only cookie set is the session cookie described above.

Limited Use

The Service's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Google user data is used only to provide and improve the user-facing features described here.

Who else is involved

Providing the Service means data passes through:

• Google — the Tasks and Drive APIs, and sign-in.
• Notion — the API your database is read from and written to.
• Deno Deploy — hosting and the key-value store described above.

Each processes data under its own terms. We add no other recipients.

How long we keep it

For as long as your account is connected. Sync status and error entries are capped and roll over on their own; adoption records expire after seven days. Use Disconnect on your dashboard to remove everything we hold about you — tokens, mapping, status, configuration cache and session — and to revoke our Google token. That deletion is immediate and cannot be undone. You can also revoke access at any time from your Google account permissions page and from your Notion workspace's connections settings; the sync stops working at once, and you should still use Disconnect to clear stored data.

Your rights

Depending on where you live, you may have the right to access, correct, export or erase your personal data, to restrict or object to its processing, and to complain to a supervisory authority. Disconnect covers erasure directly; for anything else, contact us at no contact address is configured for this deployment (set LEGAL_CONTACT_EMAIL) and we will respond within 30 days.

Security

Traffic is served over HTTPS. Tokens are held in the key-value store and are never shown in the interface or sent to your browser. Session cookies are signed, HttpOnly and SameSite-restricted. No system is perfectly secure, and we make no guarantee that ours is.

Children

The Service is not directed at children under 16 and we do not knowingly collect their data.

Changes

If this policy changes materially, the date at the top changes with it. Continuing to use the Service after that means you accept the new version.

Contact

no contact address is configured for this deployment (set LEGAL_CONTACT_EMAIL)