Privacy Policy

Last updated: February 12, 2025

Overview

While ("we", "our", or "the Service") is an open-source tool that syncs Google Calendar events with Notion databases. This policy explains what data we access, how we use it, and your rights regarding that data.

While is available as both a self-hosted application and a hosted service (SaaS). This policy applies to the hosted service at while.so. If you self-host While, your data handling is governed by your own infrastructure and policies.

Data We Access

When you use the hosted service, While accesses the following data:

  • Google Calendar data — Event titles, dates, times, descriptions, attendees, and other event metadata from calendars you choose to sync.
  • Notion data — Database properties and page content from the Notion databases you connect for syncing.
  • Authentication tokens — OAuth tokens from Google and Notion used to access your data on your behalf. These are stored encrypted.
  • Account information — Your email address and name as provided by your authentication provider.

How We Use Your Data

Your data is used exclusively to provide the sync service:

  • Reading events from Google Calendar to create or update Notion pages
  • Reading Notion pages to create or update Google Calendar events
  • Maintaining sync state to detect and resolve changes
  • Displaying sync activity and status in your dashboard

We do not sell, share, or use your data for advertising, analytics, training, or any purpose other than providing the sync service.

Third-Party Services

While integrates with the following third-party services:

  • Google Calendar API — To read and write calendar events. Subject to Google's Privacy Policy.
  • Notion API — To read and write database entries. Subject to Notion's Privacy Policy.
  • Vercel — For hosting the web application and SaaS service.

Data Storage & Security

  • OAuth tokens are stored encrypted at rest.
  • All connections use HTTPS/TLS encryption in transit.
  • We retain sync metadata (activity logs, sync state) for as long as your account is active.
  • Calendar and Notion content is processed in memory during sync and is not permanently stored beyond what is needed for sync state.

Data Deletion

You can disconnect your Google or Notion accounts at any time from your dashboard, which revokes our access tokens. To request full deletion of your account and associated data, contact us at the email below.

Self-Hosted Users

If you run While on your own infrastructure, all data remains on your servers. We have no access to your self-hosted instance, your tokens, or your synced data. You are responsible for your own data handling and compliance.

Changes to This Policy

We may update this policy from time to time. Changes will be reflected by the "Last updated" date at the top of this page.

Contact

For privacy-related questions or data deletion requests, contact privacy@while.so.