Privacy Policy – Calendar Service

Privacy Policy — StoxBox Calendar Service
Last updated: 27-10-2025

Who we are
StoxBox (“we”, “us”, “our”) operates StoxBox Calendar Service (the “Service”). This policy explains what data we access, how we use it, how we store and protect it, how long we keep it, and how you can control or delete it.

Scope of this policy
This policy applies to users who sign in with Google and authorize our app to access their Google Calendar data via the calendar.events scope.

1) Data We Access (Google User Data)

If you grant permission, our app can access the following Google Calendar data via the Google Calendar API:

• Events you create, read, update, or delete (event titles, descriptions, locations, attendees, reminders, start/end times, recurrence rules, and other event metadata).
• Your Google Account identifier needed for API calls and to associate events with your account.
• Refresh/access tokens to maintain your session if you grant offline access.
• We do not access your Gmail, Drive, Contacts, or any other Google data outside of the calendar.events permission.

2) How We Use Your Data (Purpose of Processing)

We use your Google Calendar data only to provide the core features you request inside the app, including:

• Creating, reading, updating, and deleting calendar events you initiate.
• Syncing event data so your changes appear consistently in your calendar.
• Sending you confirmations or in-app notifications about event operations (optional).
• We do not use your Google Calendar data for advertising, profiling, or selling data. We adhere to the Google API Services User Data Policy, including the Limited Use requirements.

3) Data Sharing (Third Parties)

We do not sell or rent your Google Calendar data. We may share limited data with infrastructure providers strictly to run the Service:

• Hosting / Cloud (e.g., AWS / GCP): runs servers and databases.
• Error monitoring / logs (if used): helps us diagnose service issues.
• Each provider is bound by contractual, confidentiality, and security obligations. We do not allow them to use your data for their own purposes.
• We may disclose information if required by law, regulation, legal process, or to protect the rights, property, or safety of our users or the public.

4) Storage & Security

Storage: Event metadata and minimal account identifiers may be stored in our database to operate the Service you requested (e.g., to reflect event status or provide a history of operations).

• Tokens: Access/refresh tokens are stored encrypted at rest.
• Transport: All data in transit is protected with HTTPS/TLS.
• Access controls: Production data access is restricted by role and logged.
• Segregation: Test/staging environments do not use production user data.

5) Data Retention

Operational data (events metadata we keep to operate the Service): retained as long as your account is active or as necessary to provide the Service, then deleted or anonymized.

• Tokens: deleted promptly when you disconnect the app or after inactivity/timeouts.
• Backups: time-limited and automatically purged on a rolling schedule.

6) Your Choices & Deletion

You control your data:
Revoke access anytime: Visit myaccount.google.com/permissions and remove “StoxBox Calendar Service.”

Delete data with us: Email privacy@stoxbox.in or use our in-app “Delete My Data” option (if available). We will delete tokens and any stored calendar-related metadata associated with your account within {X} days (usually faster), subject to legal retention requirements.

Event content: Events themselves live in Google Calendar. Deleting our app does not automatically remove events already created in your Google Calendar; you can delete them directly in Google Calendar or request us to perform deletions you initiated through the app.

7) International Transfers

If data is processed outside your country, we use safeguards such as encryption, restricted access, and standard contractual protections where applicable.

8) Children’s Privacy

Our Service is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect data from children.

9) Changes to This Policy

We may update this policy. Material changes will be posted on this page with a new “Last updated” date.

10) Contact Us

Data Protection / Privacy:
StoxBox
Email: support@stoxbox.in

Google User Data inquiries should reference “StoxBox Calendar Service.”