Privacy policy
bbbls keeps your tasks and, if you choose, the events of the Google calendars you link. This page says what it receives, what it does with it, where it keeps it and how you take it away.
Who runs bbbls
bbbls is operated by Jose Luis Peña. Questions, requests about your data and anything else on this page go to jose@tru4m.eu.
What bbbls receives when you sign in
You sign in with a Google account. Google sends bbbls your name, your email address and your profile picture. bbbls uses them to recognise you when you come back and to show you, by name and picture, to the members of the workspaces you share.
What bbbls receives when you link a calendar
Linking a Google Calendar is a separate, read-only consent. bbbls receives the list of calendars on that Google account, and for each calendar you tick, its events: the title, the start and end, whether it lasts all day, whether it shows you as busy or free, and the calendar's colour. bbbls never writes to Google Calendar: it cannot create, move, edit or delete an event there.
What bbbls does with it
Linked events appear on the Day view of the workspace you linked them to, beside that workspace's tasks, so that everyone planning in it can see the day as it is. bbbls uses your data for nothing else. There is no advertising, no profiling, no training of any model and no selling or renting of data.
Where it is kept
Imported events live in the workspace's own database, with the workspace's tasks. The tokens that let bbbls read a linked calendar are encrypted at rest with AES-256-GCM under a key held only on the server; they are never shown, logged or exported. The tokens Google issues when you sign in are short-lived identity tokens; the sign-in library bbbls uses stores them encrypted at rest as well.
Who can see it
Only the members of the workspace you linked a calendar to see its events. bbbls shares nothing with any third party. Imported events are left out of workspace backups and exports: they belong to the linked account and are imported again from Google if the account is linked in a restored workspace.
How long it stays, and how to remove it
Unlinking a calendar account in Settings deletes its tokens and every event it imported. Leaving a workspace takes your linked accounts with you. Deleting a workspace, or your account, removes everything it held. Unlinking does not withdraw the permission on Google's side: you can remove bbbls at any time under your Google account's third-party access, which stops all access at once.
Google API Services
bbbls's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Changes
Changes to this policy are published on this page, and the date at the top moves. A material change to how bbbls uses the data it receives from Google is announced to members by email, to the address they sign in with, before it takes effect.