Google API Services User Data Policy Disclosure
- Last updated:
- Effective:
This disclosure explains how Atlas Task Manager accesses, uses, stores, and shares information obtained from Google APIs. Our use adheres to the Google API Services User Data Policy, including the Limited Use requirements.
1. Overview
Atlas Task Manager offers optional integrations with Google services so you can sign in with your Google account and sync calendar events into your tasks. These integrations are enabled only when you explicitly connect a Google account via the OAuth consent screen, and they can be disconnected at any time from your account settings.
2. Google APIs and OAuth scopes we use
| API | Scope | Why we need it |
|---|---|---|
| Google Identity (OIDC) | openid, email, profile | Authenticate you and populate your Atlas Task Manager profile. |
| Google Calendar API | https://www.googleapis.com/auth/calendar.readonly | Display your Google Calendar events inside Atlas Task Manager. |
| Google Calendar API | https://www.googleapis.com/auth/calendar.events | Create, update, or delete events you explicitly schedule from Atlas Task Manager. |
We request only the narrowest scope necessary for each feature. If a feature later requires a different scope, you will be prompted to re-consent.
3. What Google user data we access
- Profile: your name, profile picture URL, Google account id, and primary email address.
- Calendar: event titles, start/end times, locations, descriptions, attendees, and reminders for calendars you choose to sync.
- OAuth tokens: short-lived access tokens and long-lived refresh tokens, stored encrypted at rest.
4. How we use Google user data
- To authenticate you and link your Atlas Task Manager account.
- To render your calendar events alongside your tasks.
- To create, update, or delete calendar events when you perform an explicit action in Atlas Task Manager (e.g., “add to calendar”).
- For security, abuse prevention, and to comply with legal obligations.
We do not use Google user data to serve advertisements, to target users, for retargeting, or for any personalized advertising purpose.
5. Transfers to third parties
We transfer Google user data to third parties only as strictly necessary to provide or improve user-facing features of Atlas Task Manager, to comply with applicable law, or as part of a merger, acquisition, or asset sale (in which case the recipient is bound by commitments equivalent to this disclosure). Our infrastructure sub-processors are listed on the Sub-processors page.
We do not sell Google user data. We do not transfer Google user data for advertising purposes.
6. Limited Use compliance
Atlas Task Manager's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- We use Google user data only to provide or improve user-facing features that are prominent in the Atlas Task Manager application.
- We do not transfer Google user data except as necessary to provide or improve those features, comply with applicable law, or as part of a merger, acquisition, or sale of assets.
- We do not use Google user data to serve advertisements, including retargeting, personalized, or interest-based advertising.
- We do not allow humans to read Google user data except (a) with your affirmative agreement for specific messages, (b) when necessary for security purposes (such as investigating abuse), (c) when necessary to comply with applicable law, or (d) when the data has been aggregated and anonymized for internal operations in accordance with the policy.
7. No use for AI / ML model training
We do not use Google user data to develop, improve, or train generalized artificial-intelligence or machine-learning models. When you use AI features of Atlas Task Manager, we do not include raw Google Calendar content in any training pipeline, and our contract with our AI provider (Anthropic) provides that prompts and completions are not used to train their models.
8. Retention and deletion
We retain Google user data only for as long as your integration is connected and as needed to operate the feature you requested. When you disconnect the integration, delete your account, or revoke access via Google Account permissions, we delete cached Google user data and OAuth tokens within 30 days, subject to the backup-retention windows disclosed in our Privacy Policy.
9. Your control
- Disconnect the integration in Atlas Task Manager account settings.
- Revoke access at myaccount.google.com/permissions.
- Request deletion of stored Google user data by writing to privacy@wrxstack.com.
10. Contact
Questions about our Google API usage: hello@wrxstack.com. Privacy officer: dpo@khanxlabs.com.