PRIVACY NOTICE

Last updated: April 14, 2026

W9 Daily Reminders ("the Service") is operated by W9 Labs ("we", "us"). This notice explains what data we collect, how we use it, and your rights. We only collect data necessary to provide the Service, and you retain full control over your data at all times.

1. Google User Data We Access

The Service accesses the following Google user data through Google APIs with your explicit consent:

Google Calendar events — read-only access to your primary calendar events within the time window you configure (default: current day or current week). We retrieve event summaries, start/end times, and location fields only.
Google Tasks — read-only access to your task lists. We retrieve task titles, notes, due dates, and completion status.
Google account email — your Google account email address is used to identify your account within our system and as the delivery address for daily reminder emails.

2. How We Use Google User Data

We use Google user data exclusively to generate your daily reminder email. Specifically:

Calendar events and tasks are combined into a structured daily briefing.
The data is sent to an AI provider (Cerebras or NVIDIA NIM, selected by you) to generate natural-language email copy. Event summaries and task titles may be included in the AI prompt.
Location data from calendar events may be used to enhance the generated email content.
Weather data is fetched separately via Open-Meteo API (not a Google API) based on a location you configure in your settings — this is not derived from Google data.
The final generated email HTML is delivered to you via W9 Mail (our own email infrastructure) at the email address associated with your account.

3. Data Storage and Retention

Google OAuth tokens — Access and refresh tokens are encrypted at rest and stored in our PostgreSQL database. Tokens are automatically rotated and refreshed as needed. If you disconnect Google Calendar, your tokens are permanently deleted.
Calendar events and tasks — Event and task data is processed in real-time during preview generation or scheduled email dispatch. We do not permanently store copies of your Google Calendar events or tasks beyond the execution log entry (which records only the count of events, not their content).
Generated email previews — The last generated email preview (subject, HTML body, plain text, image URL) is cached per user so you can review and re-send without re-running AI generation. This cache is overwritten each time you generate a new preview.
Execution logs — Each email dispatch is logged with a timestamp, event count, and delivery status (sent/failed). No event content, task details, or personal data is stored in execution logs beyond your email address.
Settings — Your reminder preferences (time, timezone, language, weather location, AI provider, image provider, summary style, schedule type) are stored in our database and can be modified or deleted at any time.

4. Data Sharing and Third Parties

We do not sell, rent, or share your Google user data with advertisers, data brokers, or any third parties beyond what is strictly necessary to provide the Service:

AI providers (Cerebras / NVIDIA NIM) — Your calendar event summaries and task titles are included in prompts sent to your selected AI provider for natural-language generation. These providers process prompts as part of their service. We select providers with strong privacy practices and do not use your data to train their models.
Image generation (Pollinations.ai / Cloudflare Workers AI) — Only a static creative brief (image prompt) is sent, which does not contain your personal data, event details, or Google user data.
Weather (Open-Meteo) — Only your configured weather location (a city name or coordinates) is sent. No Google user data is involved.
W9 Mail — The generated email content (which may include event summaries) is transmitted through our own email delivery infrastructure for delivery to your inbox.

5. Your Rights and Choices

Revoke access — You can revoke Google API access at any time through your Google Account settings (Google Account → Security → Third-party apps with account access). This will immediately stop our access to your Calendar and Tasks data.
Delete your data — You can request deletion of all your data by contacting us at hi@w9.se. We will delete your settings, cached previews, execution logs, and Google OAuth tokens within 30 days.
Export your data — You can request a copy of all data we hold about you by contacting us at hi@w9.se. This includes your settings, execution logs, and cached previews.
Modify settings — You can change or disable any feature (weather, images, AI provider, schedule type) at any time through the Settings page.

6. Data Security

All data is transmitted over HTTPS with TLS encryption.
OAuth tokens are encrypted at rest in our PostgreSQL database.
The Service runs on infrastructure managed by W9 Labs with restricted access.
We do not store your Google password or any Google account credentials — only OAuth tokens scoped to Calendar and Tasks read-only access.

7. Google API Services User Data Policy Compliance

The Service uses Google OAuth scopes https://www.googleapis.com/auth/calendar.readonly and https://www.googleapis.com/auth/tasks.readonly.
We access Google user data only with your explicit consent through the OAuth authorization flow.
Google user data is used exclusively for the limited purpose of generating daily reminder emails as described in this notice.
We do not use Google user data for advertising, marketing to third parties, or any purpose unrelated to providing the Service to you.
Google user data is not transferred to any data broker or credit reporting agency.

8. Changes to This Notice

We may update this Privacy Notice from time to time. The "Last updated" date at the top will reflect the most recent changes. We encourage you to review this notice periodically.

9. Contact

For any questions about this Privacy Notice or your data, please contact us at hi@w9.se.

← BACK TO REMINDERS TERMS OF SERVICE