Privacy Policy

1. Who we are and what this policy covers

This Privacy Policy explains what personal information TownRobin collects, how we use and share it, and the choices you have. "TownRobin," "we," "us," and "our" mean Adam Sedillo-Glatt, doing business as TownRobin, a sole proprietorship in California.

This policy applies to:

• our website at townrobin.com;
• the TownRobin Nest application at nest.townrobin.com;
• any other TownRobin service that links to this policy.

Together, these are the "Services." This policy is part of our Terms of Service.

We do not sell your personal information. We also do not share it for targeted advertising, and we do not use your Google data for advertising.

2. Information we collect

We collect only what we need to run the Services.

Public meeting information that we collect from government websites (meeting names, dates, agendas, and locations) is public information about public bodies. It is not personal information about you.

3. Google user data

TownRobin uses Google sign-in and Google Calendar. We ask only for the permissions a feature needs. Some are requested only when you turn on a feature that needs them.

Which calendars and events we read.

• Which calendars. TownRobin works only with the calendars you connect for sync. That is either a calendar TownRobin creates for you, or an existing secondary calendar that you choose and can edit. We do not offer your primary calendar as a sync choice.
• Which events. On a connected calendar, we read all events to find and update the ones TownRobin manages and to detect changes and RSVP responses to them. We skip events that TownRobin did not create, and we do not store them.
• One exception. When you choose an existing calendar, we show you the titles of up to 10 upcoming events on it that TownRobin did not create, so you can confirm it is the right calendar. We do not save those titles.
• The calendar list. To let you pick a calendar, we read the names of the calendars in your calendar list.

What we do not do with Google data. We do not use Google data for advertising. We do not sell it. We do not use it to train generalized AI or machine-learning models.

We store your Google refresh token on our servers in access-restricted storage, so that sync keeps working when you are not signed in. Our personnel do not read Google user data, except:

• with your permission;
• when needed for security;
• to comply with the law;
• in aggregated, anonymized form for operations.

Limited Use. TownRobin's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Revoking access. You can remove TownRobin's access to your Google account at any time at myaccount.google.com/permissions. Sync stops when you do.

4. How we use information

We use personal information to:

• Provide the Services. This means signing you in, managing teams, syncing meetings and assignments to Google Calendar, and tracking RSVPs.
• Send service emails. These include team invitations. Service emails go only to the people they are addressed to.
• Process payments and manage subscriptions through Stripe.
• Provide support and respond to your messages.
• Keep the Services secure and working. This includes preventing abuse and fraud, diagnosing errors, and monitoring performance.
• Improve the Services, using aggregated or de-identified information where possible.
• Send occasional product updates if you signed up for our newsletter. You can unsubscribe at any time.
• Comply with the law, and enforce our Terms.

5. How we share information

We share personal information only with the service providers below, which process it on our behalf to run the Services, and in the other cases listed after the table.

Within your team. Your name, email, assignments, and RSVP status are visible to other members of the customer accounts you belong to. Calendar invitations are visible to their recipients.

Other disclosures. We may also disclose information:

• if required by law, subpoena, or court order;
• to protect the rights, property, or safety of TownRobin, our users, or others;
• with your direction or consent;
• to a successor if we reorganize, for example when we form a company, or in a merger, acquisition, or sale of assets. The successor will be bound by this policy.

We also use a proxy service to fetch some public government websites. It handles only public web pages, not your personal information.

6. Retention and account deletion

We keep personal information for as long as your account is active, and afterward only as long as described below.

Consent records. Each time you accept the Terms of Service or acknowledge this Privacy Policy, we keep a record of it for as long as your user exists, and for 7 years after you delete your user (see below).

Deleting an account. The owner of a customer account can delete it from that account's settings page. Deletion:

1. cancels the account's subscription immediately;
2. deletes the account and its team, watched calendars, and assignments;
3. removes TownRobin's upcoming events from the Google calendars the account synced to, without notifying attendees. Past events stay. A calendar is then deleted if nothing at all is left in it. Google Workspace resource calendars are never deleted.

Deleting an account does not delete your user. You can still sign in, belong to other accounts, or create a new one.

Deleting your user. Anyone can delete their TownRobin user in Settings. If you own any accounts, you delete those first. Deleting your user:

1. deletes your user profile and sign-in account;
2. revokes TownRobin's access to your Google account;
3. removes your access to every account you belong to.

Those accounts keep your name and email on their team, marked "user deleted," and keep you assigned to their meetings. Each becomes a pending invite. If you sign up again with the same email, you can rejoin. These invites don't expire. An account's owner or admins can remove you from their team at any time.

What we keep after deletion:

• A minimal deletion record. This holds the account email, account IDs, subscription status, and counts of calendars and members. We keep it for 90 days to handle support questions and disputes about the deletion, then it is deleted automatically.
• Billing records in Stripe. These include customer, invoice, and payment history. We keep them as long as tax and accounting law requires, generally up to 7 years.
• Consent records. We keep the record of your acceptance of the Terms of Service and acknowledgement of this Privacy Policy (see Section 2) for 7 years after you delete your user, in a restricted archive, then delete it automatically. We keep it to show that you accepted these documents and to establish, exercise, or defend legal claims.
• Records of service emails we sent (recipient, email type, and delivery status). We keep these for 90 days.
• Error reports. We keep these for up to 90 days.
• Server logs. These include account and user IDs. We keep them for up to 30 days.
• Backups. Backups may hold deleted data for a limited time until they are overwritten.

Events already in Google Calendar. Past events TownRobin wrote to your Google Calendar, and invitations already sent to attendees, stay in Google until you or the attendees delete them.

7. Your choices and rights

Your rights. Wherever you live, you can ask us to:

• access the personal information we hold about you, or get a copy of it;
• correct inaccurate information;
• delete your information, subject to the retention described in Section 6.

To make a request, email privacy@townrobin.com from the address on your account. We will respond within 45 days. We may need to verify your identity first. We will not treat you differently for using these rights.

Other choices:

• Emails. You can unsubscribe from newsletters with the link in each email. Service emails, such as invitations and billing notices, are part of using the Services.
• Google access. You can revoke it at any time (see Section 3).
• Cookies. The app uses browser storage to keep you signed in. Our website analytics (Umami) do not use cookies. reCAPTCHA, which Google uses for App Check, may set cookies under Google's Privacy Policy.
• Do Not Track. We do not track you across other websites, so we do not change our behavior in response to Do Not Track signals.

California residents.

• We do not sell or share personal information for cross-context behavioral advertising, as those terms are defined in the California Consumer Privacy Act.
• We do not disclose personal information to third parties for their own direct marketing, as described in California's "Shine the Light" law (Civil Code Section 1798.83).

8. Security, children, changes, and contact

Security. We protect information with industry-standard measures. These include:

• encryption in transit (HTTPS) and at rest, provided by Google Cloud;
• access rules that limit each user to their own customer accounts;
• restricted storage for Google tokens;
• app integrity checks.

No system is perfectly secure. If a breach affects your personal information, we will notify you as the law requires.

Where data is processed. We and our main providers process data in the United States. If you use the Services from outside the US, your information will be transferred to and processed in the US.

Children. The Services are not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.

Changes to this policy. We may update this policy, and we will post the new version with a new effective date. If a change materially affects how we use personal information you have already given us, we will email account owners before it takes effect. When we publish a new version of this policy or the Terms of Service, we will ask you to review and accept or acknowledge it the next time you use the Services.

Contact us.