Privacy Policy
This policy explains how MCastle Project Tracker accesses, uses, stores, and deletes information, including data received through Google Calendar.
Information processed
The system processes account and work information supplied by MCastle administrators and users, including names, usernames, optional email addresses, project assignments, tasks, comments, reports, and authorized business records.
When a user connects Google Calendar, the system may process the Google account email address; the identifiers and names of calendars owned by the user; the selected calendar mappings; OAuth access and refresh tokens; synchronization metadata; and event identifiers, titles, descriptions, and dates from mapped calendars.
How Google user data is used
Google user data is used only to let the user select or create Google calendars, synchronize MCastle project tasks and deadlines with those calendars, display mapped calendar events in MCastle, and keep user-requested changes synchronized in both systems.
MCastle Project Tracker does not use Google user data for advertising, profiling, sale, or unrelated analytics. Google user data is not shared with third parties except infrastructure providers acting only as needed to operate and secure the service, or when legally required.
Storage and security
OAuth access tokens, refresh tokens, and webhook verification tokens are encrypted at rest. Access to project and calendar information is controlled by authenticated accounts, project visibility rules, and role-based permissions. Data is transmitted to Google and the hosted application over HTTPS.
Retention and deletion
Calendar connection data is retained while the user keeps the Google account connected. Unlinking a calendar removes its local mapping, synchronization links, and locally imported event records. Disconnecting the Google account removes the locally stored OAuth tokens, mappings, synchronization links, and imported Google event records for that user.
Calendars and events already stored in the user’s Google account may remain there after disconnection and can be managed or deleted by the user in Google Calendar. A user can also revoke MCastle access from their Google Account permissions.
User choices
Connecting Google Calendar is optional. Users choose the calendars they map and can unlink mappings or disconnect their account from the calendar controls. Requests concerning access, correction, or deletion of account information can be directed to the support contact below.
Policy changes
This policy may be updated when the application’s functionality or legal obligations change. The effective date shown above identifies the current version.
Contact
Privacy and support inquiries: camilo.e.velazquez@gmail.com.