Privacy Policy

What Data We Collect

When you use StackFlow, we collect:

• Account information (email address, name, and profile picture) provided by your sign-in provider (Google or GitHub)
• Task and stack data you create within the application
• Calendar event data (titles, times, descriptions, attendees, locations) when you connect Google Calendar or Apple Calendar
• Usage analytics to improve the product (anonymized)

Google User Data

When you sign in with Google, we receive: your email address, name, and profile picture via Google OAuth (openid, email, profile scopes).

When you connect Google Calendar, we access your calendar list and event data including: event titles, times, descriptions, attendees, organizer, locations, and conference links. We request read-only access to your Google Calendar via granular scopes: calendar.events.readonly, calendar.freebusy, and calendar.settings.readonly.

We request offline access (a refresh token) to sync your calendar in the background when you're not actively using StackFlow.

How We Use Your Data

We use your data to:

• Authenticate your identity and manage your account (email, name, profile picture)
• Display your calendar events alongside your tasks for scheduling and conflict detection (Google Calendar data)
• Sync calendar data in the background to keep your view up-to-date (using offline access)
• Send important account-related notifications
• Provide customer support when requested

Data Sharing and Transfers

• We do not sell, rent, or trade your personal data or Google user data to any third party.
• We do not share Google user data with third parties except as necessary to provide the StackFlow service (e.g., our cloud hosting infrastructure).
• We do not use Google user data for advertising, market research, or any purpose unrelated to providing or improving StackFlow.

Data Storage and Security

Your data is stored securely using industry-standard encryption. We use HTTPS for all data transmission and encrypt sensitive data at rest. Our infrastructure is hosted on reputable cloud providers with SOC 2 compliance.

Data Retention and Deletion

• We retain your account data for as long as your account is active.
• Calendar data synced from Google Calendar is cached in our database and refreshed periodically. When you disconnect Google Calendar, cached calendar data is deleted within 30 days.
• When you delete your account, all associated data — including tasks, calendar cache, and authentication tokens — is permanently deleted within 30 days.
• You can disconnect Google Calendar at any time from Settings, which immediately revokes our access and queues cached data for deletion.

Third-Party Services

StackFlow integrates with the following third-party services:

• Google Calendar — We access your calendar data in read-only mode to display events alongside your tasks. We use Google OAuth for authentication and request offline access for background sync. No calendar data is written, modified, or deleted by StackFlow.
• Apple Calendar — For CalDAV-based calendar sync
• Authentication providers — For secure sign-in (Google, GitHub)

Your Rights

You have the right to:

• Access your personal data
• Export your data in a portable format
• Request deletion of your account and data
• Disconnect calendar integrations at any time

Self-Hosted Option

For complete data control, you can self-host StackFlow. When self-hosted, all data stays on your own infrastructure and is never transmitted to our servers. See our GitHub repository for self-hosting instructions.

Google API Services Limited Use Disclosure

StackFlow's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Changes to This Policy

We will notify users of material changes to this privacy policy via email or in-app notification at least 30 days before the changes take effect. Continued use of StackFlow after changes constitutes acceptance of the updated policy.

Contact

For privacy-related questions or requests, please contact us at privacy@ezcorp.org.