Privacy Policy

This Privacy Policy describes how GradeUp Reminders ("the Service") collects, uses, and protects information when you use our Telegram bot and Google Calendar integration.

1. Who we are

GradeUp Reminders is operated by Luis Castellanos. You can contact us at atlas@luiscastellanos.net.

2. What data we collect

When you connect your Google account, we access:

• Your Google Calendar events (read-only) — to find scheduled lessons
• Your Google account email address — to identify your account

We also store your Telegram user ID and the Telegram group chat IDs you provide for your students.

3. How we use your data

We use your data solely to:

• Read your calendar and send lesson reminder messages to your students via Telegram
• Associate your students with the correct Telegram group chats

We do not sell, share, or use your data for any other purpose.

4. Data storage and protection

We take the following measures to protect your data:

• Encryption in transit: All communication between your browser, Google's servers, and our service uses HTTPS/TLS encryption.
• Encryption at rest: OAuth tokens (Google access and refresh tokens) are stored in files with restricted permissions (readable only by the service account) on a private server.
• Access controls: Our server is accessible only via SSH key authentication. No third parties have access to the server or stored data.
• Minimal data retention: Google Calendar event data (event titles, times, and descriptions) is processed in memory at reminder time and is never stored persistently. Only your OAuth tokens, Telegram user ID, and student chat IDs are retained to enable ongoing reminders.
• Data deletion: You may request deletion of all your stored data (tokens, student names, chat IDs) at any time by emailing us at atlas@luiscastellanos.net. Data will be deleted within 30 days of your request.

We do not share your data with any third parties.

5. Google API usage

Our use of Google Calendar data is limited to reading event titles, times, and descriptions to identify lesson appointments. We request read-only access and do not modify your calendar in any way.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. Revoking access

You can revoke our access to your Google account at any time by visiting Google Account Permissions and removing GradeUp Reminders.

7. Contact

For any questions about this policy, email atlas@luiscastellanos.net.