everworks Privacy Policy

Last updated: July 27, 2026

This Privacy Policy explains what information everworks (the "Service") collects and uses through Google account integration (OAuth).

1. Google User Data We Collect

The Service requests only the following scopes when connecting your Google account, and does not access any other Google data.

Scope	Data Accessed
`.../auth/userinfo.email`	Your Google account email address
`.../auth/userinfo.profile`	Your name, profile photo, and other public profile information from your Google account
`.../auth/calendar.readonly`	Read-only access to your Google Calendar events (title, time, attendees) within a date range you select in the app

2. How We Use This Data

Email address: Used to identify your account, process login, and send account-related notifications.
Profile information (name, photo): Used to display your profile within the Service and to identify you to teammates in collaboration screens.
Google Calendar events: Used to fetch and display your existing Google Calendar events (via the calendar.events.list API) inside the Service's scheduling screens, so you can view your personal and team schedules together in one place. This data is accessed on a read-only basis; the Service does not create, modify, or delete events in your Google Calendar.

3. Data Sharing and Third Parties

The Service does not sell, rent, or share the Google user data described above with third parties for advertising purposes.

We use the following infrastructure provider solely as a processor to operate the Service:

Google Firebase (Firebase Cloud Messaging) — used only to deliver push notifications to your device. Firebase does not receive your Google Calendar data.

We do not disclose Google user data to any other party, except where required by law (e.g., a valid request from law enforcement).

The Service does not use Google user data for advertising purposes or share it with any advertising network.

4. Data Protection Measures

All data in transit is encrypted using HTTPS (TLS).
OAuth access tokens and refresh tokens are encrypted before being stored in our database and are never stored or transmitted in plain text.
Access to Google user data is restricted to the authenticated account owner and to internal systems with the minimum privileges necessary to operate the Service.
Access to Google user data by our personnel is limited to the minimum number of staff required to operate and support the Service.

5. Data Retention and Deletion

Your Google account connection (including encrypted access/refresh tokens, email, and display name obtained from Google) is stored only while your Google account remains connected to the Service.
When you disconnect your Google account from the Service, all associated Google user data (tokens, email, display name obtained via Google) is deleted from our database immediately.
You can disconnect your Google account at any time from within the Service's account settings, or by revoking access directly via the Google Account permissions page.
Calendar event data fetched via the Google Calendar API is used only to render your schedule in real time within the app and is not permanently stored on our servers beyond what is necessary to display it.

6. Opt-Out

You may disconnect your Google account and stop all further data collection at any time, either from the Service's account settings or by revoking access through the Google Account permissions page above.

7. Children's Privacy

This Service is not directed at children under the age of 13 (or the applicable age in your jurisdiction), and we do not knowingly collect personal information from children under that age.

8. Changes to This Policy

This Privacy Policy may be updated from time to time to reflect changes to the Service. Any changes will be posted on this page.

9. Contact Us

If you have any questions about this Privacy Policy or how we handle your Google user data, please contact us at:

Email: dilee@blueevers.com