Privacy Policy

1. Information we collect

We collect the following categories of information:

• Account information. When you create an account, we collect your email address and a securely hashed password.
• Content you create. We store the calendar blocks, projects, tasks, goals, kanban cards, rhythms, stash items, notes, tags, and other content you add to the Service so we can display it back to you.
• Connected calendar data. If you connect a third-party calendar (for example, Google Calendar), we receive events and calendar metadata from that provider to sync them into your nerdcal workspace. We only request the scopes needed for this sync.
• AI interactions. When you use AI features, we send the prompt and relevant context from your workspace (for example, your calendar, notes, goals, and projects) to our AI model provider so it can generate a response.
• Usage and device data. We collect limited technical information such as IP address, browser type, device/OS, referrer, pages viewed, and timestamps. This is used for security, debugging, and product improvement.
• Cookies. We use a session cookie to keep you signed in. We may use additional cookies for preferences and basic analytics.

2. How we use information

• To provide, maintain, and improve the Service.
• To authenticate you, keep your account secure, and prevent abuse.
• To sync events between your connected calendars and your nerdcal workspace.
• To power AI features you invoke, including generating summaries, suggestions, and answers based on your content.
• To send transactional emails (for example, security alerts or account notices) and, if you opt in, product updates.
• To comply with legal obligations and enforce our Terms.

3. How we share information

We do not sell your personal information. We share information only with:

• Service providers who help us run nerdcal — for example, cloud hosting, database, email delivery, error monitoring, and analytics providers — under contracts that require them to protect your data.
• AI model providers (for example, Anthropic or providers accessed via Vercel AI Gateway) when you use AI features. We configure these providers for zero data retention where available, but content you submit to AI features is transmitted to them for the purpose of generating a response.
• Third-party integrations you choose to connect,such as Google Calendar. Data you exchange with those providers is governed by their own privacy policies.
• Legal and safety — we may disclose information when required by law, legal process, or to protect the rights, safety, and property of nerdcal or others.
• Business transfers — if nerdcal is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction.

4. Data retention

We keep your account content for as long as your account is active. When you delete your account, we delete or anonymize your personal information within a reasonable period, except where we must retain it to comply with legal obligations, resolve disputes, or enforce our agreements. Backups may persist for a limited time before being overwritten.

5. Security

We use reasonable administrative, technical, and physical safeguards designed to protect your information, including encryption in transit, hashed passwords, and restricted internal access. No method of transmission or storage is 100% secure; please use a strong, unique password and keep it confidential.

6. Your choices and rights

• Access and update. You can access and edit most of your information directly from within the Service.
• Delete. You can delete content at any time, and you may request deletion of your account by contacting us.
• Disconnect integrations. You can disconnect third-party integrations (for example, Google Calendar) from your settings at any time.
• Regional rights. Depending on where you live (for example, in the EEA, UK, or California), you may have additional rights such as the right to access, port, correct, restrict, or object to our use of your personal information. Contact us to exercise these rights.

7. International transfers

nerdcal may process and store information in countries other than your own, including the United States. Where required, we use appropriate safeguards for cross-border transfers.

8. Children

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

9. Third-party links

The Service may contain links to third-party websites or services. We are not responsible for their privacy practices. Please review the privacy policies of any third party you interact with.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service or by other reasonable means. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

11. Contact us

Questions or requests about this Privacy Policy? Contact us at support@nerdcal.com. nerdcal is based in Bend, Oregon, USA.