Privacy at PsychoGTM.

What the workspace stores

PsychoGTM stores your account details and the work you add: server membership, contacts, channels, documents, motions, objectives, logs, assets and calendar items. We use this information to provide the workspace, enforce access permissions and operate the features you choose.

Account assets and personal calendar items start private. Server records are available according to that server’s permissions. Sharing an asset with a server makes its full contents available to that server’s authorised members and agents. Sharing a calendar item with server members or publishing a log is a separate action. A public log can be read by anyone with its public link.

Connecting Google Calendar

Connecting is optional. With your Google consent, PsychoGTM reads the list of calendars you can access and events from the calendars you select. This includes event titles, descriptions, dates and times, locations, links and provider identifiers needed to keep imports up to date. It does not request Gmail access or permission to create, edit or delete Google events.

We use Google Calendar data to display your schedule in My calendar and, when you choose, a server calendar. Imports start private. Assigning an event to a server keeps it private until you explicitly choose Server members. Sharing makes the event details visible to members who can access that server.

Sync runs for the calendar range you view, while the app is open, or when you select Sync now. It is not a continuous background scheduler. Google remains the place to edit imported event details.

PsychoGTM’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not sell Google user data, use it for advertising, or use it to train generalized AI models.

Agents and connected tools

Workspace agents use the context permitted for their server and task. The optional account MCP connection has separate, explicit permissions for calendar and asset access. If you authorize an external AI application to read this data, the requested information is sent to that application and its handling also depends on that provider’s policies. Google authorization credentials are never included in MCP responses or agent context.

Connecting Google Calendar does not by itself enable an agent to send messages or change your Google calendar. You can revoke MCP tokens in MCP and withdraw an asset’s server access in Assets & ideas.

Administrator access and operational metrics

Authorised PsychoGTM administrators may access account information, customer workspaces and stored content when needed to provide support, investigate security or abuse, recover data, or deliver a service you have agreed with us. This access is limited to the purpose and the people who need it. Server owners also manage their own server’s membership and shared records; they do not gain access to another member’s unshared personal assets or calendar.

We use operational information such as feature usage, job status, errors and service performance to run and improve the product. We prefer aggregated metrics where individual content is unnecessary. We do not sell your workspace content or use it to train general-purpose AI models. A connected model or execution provider receives only the information needed for the features you authorise, subject to that provider’s terms.

Google-connected data has additional limits. Human access requires your affirmative agreement to view specific data, or a permitted security, legal or aggregated internal-operations purpose under Google’s Limited Use policy. General administrator status is not permission to browse your private Google Calendar.

Storage, security and service providers

We use Vercel to host the application and Supabase for authentication, database and file storage. These services process information needed to run PsychoGTM. Account and server permissions restrict access to workspace records. Google refresh credentials are encrypted on the server and are not available through ordinary workspace data access.

Service providers may process information in countries other than your own. We use contractual and technical protections appropriate to those services. Essential session cookies keep you signed in and support security checks. Browser storage remembers interface preferences. Operational records and backups support troubleshooting, security and recovery; access to them is restricted.

Disconnecting, deleting and contacting us

In My calendar, open Google Calendar and choose Disconnect. PsychoGTM removes the stored connection credentials and requests revocation at Google. You choose whether to remove imported events or keep editable local copies. You can also revoke access directly in your Google Account connections. Stopping sync for one calendar keeps its earlier imports until you remove them.

You can edit or delete records where you have permission. Previously shared or published information may already have been copied by its recipients. Backups are separate from the active workspace and may retain earlier records for recovery. We retain information for as long as needed to provide the service, fulfil agreed or legal obligations, resolve disputes and protect security, then delete or de-identify it. Ask us about deletion and backup retention for your account.

For access, correction, account deletion, retention questions or other privacy requests, contact hello@appledore.net. Include your PsychoGTM account email and the request; do not send passwords or access tokens.