StillOnTime/privacy-policy.html at main · makaronz/StillOnTime · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Privacy Policy - StillOnTime</title>
    <style>
        body {
            font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
            line-height: 1.6;
            max-width: 800px;
            margin: 0 auto;
            padding: 20px;
            color: #333;
            background-color: #f8f9fa;
        }
        .container {
            background: white;
            padding: 40px;
            border-radius: 8px;
            box-shadow: 0 2px 10px rgba(0,0,0,0.1);
        }
        h1 {
            color: #2c3e50;
            border-bottom: 3px solid #3498db;
            padding-bottom: 10px;
        }
        h2 {
            color: #34495e;
            margin-top: 30px;
            margin-bottom: 15px;
        }
        h3 {
            color: #7f8c8d;
            margin-top: 20px;
            margin-bottom: 10px;
        }
        .highlight {
            background-color: #ecf0f1;
            padding: 15px;
            border-left: 4px solid #3498db;
            margin: 20px 0;
        }
        .contact-info {
            background-color: #e8f5e8;
            padding: 20px;
            border-radius: 5px;
            margin: 20px 0;
        }
        ul {
            margin: 10px 0;
            padding-left: 20px;
        }
        li {
            margin: 5px 0;
        }
        .last-updated {
            font-style: italic;
            color: #7f8c8d;
            text-align: center;
            margin-bottom: 30px;
        }
        .oauth-section {
            background-color: #fff3cd;
            padding: 20px;
            border-radius: 5px;
            border-left: 4px solid #ffc107;
            margin: 20px 0;
        }
        a {
            color: #3498db;
            text-decoration: none;
        }
        a:hover {
            text-decoration: underline;
        }
    </style>
</head>
<body>
    <div class="container">
        <h1>Privacy Policy for StillOnTime</h1>
        <p class="last-updated"><strong>Last Updated:</strong> January 2025</p>

        <div class="highlight">
            <strong>Quick Summary:</strong> StillOnTime is a film schedule automation service that helps you manage shooting schedules, calculate routes, and receive weather forecasts. We collect and process your information to provide these services, primarily through Google OAuth integration.
        </div>

        <h2>1. Introduction</h2>
        <p>StillOnTime ("we," "our," or "us") is a film schedule automation service that helps film industry professionals manage their shooting schedules, calculate optimal routes, and receive weather forecasts. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.</p>

        <h2>2. Information We Collect</h2>

        <h3>2.1 Information You Provide Directly</h3>
        <ul>
            <li><strong>Account Information:</strong> Your name and email address when you create an account</li>
            <li><strong>Configuration Data:</strong> Home address, Panavision address, and notification preferences</li>
            <li><strong>Communication Preferences:</strong> SMS phone numbers, push notification tokens, and email preferences</li>
        </ul>

        <h3>2.2 Information We Collect Through Google OAuth</h3>
        <div class="oauth-section">
            <p>When you authenticate with Google, we collect:</p>
            <ul>
                <li><strong>Profile Information:</strong> Your Google ID, email address, and display name</li>
                <li><strong>Access Tokens:</strong> Secure tokens to access your Google services (Gmail, Calendar, Drive)</li>
                <li><strong>Required Scopes:</strong> We request access to:
                    <ul>
                        <li>Gmail (read-only access to detect schedule emails)</li>
                        <li>Google Calendar (to create shooting schedule events)</li>
                        <li>Google Drive (to access PDF attachments)</li>
                        <li>Basic profile information (email and name)</li>
                    </ul>
                </li>
            </ul>
        </div>

        <h3>2.3 Information We Process from Your Emails</h3>
        <ul>
            <li><strong>Email Metadata:</strong> Subject lines, sender information, and timestamps</li>
            <li><strong>PDF Attachments:</strong> Schedule documents containing:
                <ul>
                    <li>Shooting dates and call times</li>
                    <li>Location information</li>
                    <li>Scene details and equipment lists</li>
                    <li>Safety notes and contact information</li>
                </ul>
            </li>
            <li><strong>Processing Status:</strong> Whether emails have been processed and any errors encountered</li>
        </ul>

        <h3>2.4 Location and Route Information</h3>
        <ul>
            <li><strong>Addresses:</strong> Your configured home and work addresses for route calculation</li>
            <li><strong>Route Data:</strong> Calculated travel times, departure times, and route segments</li>
            <li><strong>Geographic Data:</strong> Location coordinates for weather forecasting</li>
        </ul>

        <h3>2.5 Weather and Calendar Data</h3>
        <ul>
            <li><strong>Weather Forecasts:</strong> Temperature, precipitation, and weather warnings for shooting locations</li>
            <li><strong>Calendar Events:</strong> Created events with your shooting schedules and route information</li>
            <li><strong>Notifications:</strong> SMS and email notifications about schedules and weather</li>
        </ul>

        <h2>3. How We Use Your Information</h2>

        <h3>3.1 Primary Service Functions</h3>
        <ul>
            <li><strong>Schedule Processing:</strong> Automatically detect and parse shooting schedule emails</li>
            <li><strong>Route Planning:</strong> Calculate optimal departure times and travel routes</li>
            <li><strong>Calendar Integration:</strong> Create calendar events with your shooting schedules</li>
            <li><strong>Weather Monitoring:</strong> Provide weather forecasts for shooting locations</li>
            <li><strong>Notifications:</strong> Send SMS, email, and push notifications about your schedules</li>
        </ul>

        <h3>3.2 Service Improvement</h3>
        <ul>
            <li><strong>Analytics:</strong> Understand how our service is used to improve functionality</li>
            <li><strong>Error Handling:</strong> Debug and fix technical issues</li>
            <li><strong>Feature Development:</strong> Develop new features based on usage patterns</li>
        </ul>

        <h2>4. Information Sharing and Disclosure</h2>

        <h3>4.1 Third-Party Services</h3>
        <p>We share information with the following services to provide our functionality:</p>

        <h4>Google Services:</h4>
        <ul>
            <li><strong>Gmail API:</strong> To monitor your emails for shooting schedules</li>
            <li><strong>Google Calendar API:</strong> To create calendar events</li>
            <li><strong>Google Drive API:</strong> To access PDF attachments</li>
            <li><strong>Google Maps API:</strong> To calculate routes and geocode locations</li>
        </ul>

        <h4>External Services:</h4>
        <ul>
            <li><strong>OpenWeatherMap:</strong> To provide weather forecasts</li>
            <li><strong>Twilio:</strong> To send SMS notifications (if enabled)</li>
        </ul>

        <div class="highlight">
            <strong>Important:</strong> We do not sell, rent, or trade your personal information to third parties for marketing purposes.
        </div>

        <h2>5. Data Security</h2>
        <p>We implement appropriate technical and organizational measures to protect your information:</p>
        <ul>
            <li><strong>Encryption:</strong> All data is encrypted in transit and at rest</li>
            <li><strong>Access Controls:</strong> Strict access controls and authentication requirements</li>
            <li><strong>Regular Audits:</strong> Security audits and vulnerability assessments</li>
            <li><strong>Data Minimization:</strong> We collect only the information necessary for our services</li>
        </ul>

        <h2>6. Data Retention</h2>
        <ul>
            <li><strong>User Accounts:</strong> Retained until you delete your account</li>
            <li><strong>Email Data:</strong> Processed emails and schedules retained for 2 years</li>
            <li><strong>Route Plans:</strong> Retained for 1 year for historical analysis</li>
            <li><strong>Weather Data:</strong> Retained for 6 months</li>
            <li><strong>Logs:</strong> Retained for 90 days for security and debugging purposes</li>
        </ul>

        <h2>7. Your Rights and Choices</h2>

        <h3>7.1 Access and Control</h3>
        <p>You have the right to:</p>
        <ul>
            <li><strong>Access:</strong> Request a copy of your personal information</li>
            <li><strong>Correction:</strong> Correct inaccurate or incomplete information</li>
            <li><strong>Deletion:</strong> Request deletion of your personal information</li>
            <li><strong>Portability:</strong> Receive your data in a structured, machine-readable format</li>
            <li><strong>Restriction:</strong> Restrict how we process your information</li>
        </ul>

        <h3>7.2 Google OAuth Controls</h3>
        <ul>
            <li><strong>Revoke Access:</strong> You can revoke our access to your Google account at any time</li>
            <li><strong>Manage Permissions:</strong> Control which Google services we can access</li>
            <li><strong>Account Settings:</strong> Manage your account through Google's privacy settings</li>
        </ul>

        <h2>8. Contact Information</h2>
        <div class="contact-info">
            <p>If you have any questions about this Privacy Policy or our data practices, please contact us:</p>
            <ul>
                <li><strong>Email:</strong> privacy@stillontime.com</li>
                <li><strong>Address:</strong> [Your Business Address]</li>
                <li><strong>Phone:</strong> [Your Contact Number]</li>
            </ul>
            <p>For data protection inquiries specifically, you can reach our Data Protection Officer at: <strong>dpo@stillontime.com</strong></p>
        </div>

        <h2>9. Regional Privacy Rights</h2>

        <h3>9.1 European Union (GDPR)</h3>
        <p>If you are in the EU, you have additional rights under the General Data Protection Regulation:</p>
        <ul>
            <li><strong>Right to Object:</strong> Object to processing based on legitimate interests</li>
            <li><strong>Right to Withdraw Consent:</strong> Withdraw consent at any time</li>
            <li><strong>Right to Lodge a Complaint:</strong> Complain to your local data protection authority</li>
        </ul>

        <h3>9.2 California (CCPA)</h3>
        <p>If you are a California resident, you have rights under the California Consumer Privacy Act:</p>
        <ul>
            <li><strong>Right to Know:</strong> Know what personal information we collect and how we use it</li>
            <li><strong>Right to Delete:</strong> Request deletion of your personal information</li>
            <li><strong>Right to Opt-Out:</strong> Opt out of the sale of personal information (we do not sell data)</li>
            <li><strong>Right to Non-Discrimination:</strong> We will not discriminate against you for exercising your rights</li>
        </ul>

        <h2>10. Google OAuth Specific Information</h2>
        <div class="oauth-section">
            <h3>10.1 Required Disclosures for Google OAuth</h3>
            <p>This application uses Google OAuth 2.0 for authentication and to access your Google services. By using our service, you consent to:</p>
            <ul>
                <li><strong>Data Collection:</strong> Collection of your Google profile information (name, email, Google ID)</li>
                <li><strong>API Access:</strong> Access to your Gmail, Calendar, and Drive data as specified in our requested scopes</li>
                <li><strong>Data Processing:</strong> Processing of your data for the purposes described in this privacy policy</li>
                <li><strong>Data Sharing:</strong> Sharing of your data with Google services and other third-party services as described above</li>
            </ul>

            <h3>10.2 Google's Privacy Policy</h3>
            <p>Your use of Google services is also subject to <a href="https://policies.google.com/privacy" target="_blank">Google's Privacy Policy</a>.</p>

            <h3>10.3 Revoking Access</h3>
            <p>You can revoke our access to your Google account at any time by:</p>
            <ol>
                <li>Going to your Google Account settings</li>
                <li>Navigating to "Security" > "Third-party apps with account access"</li>
                <li>Finding "StillOnTime" and clicking "Remove access"</li>
            </ol>
        </div>

        <h2>11. Changes to This Privacy Policy</h2>
        <p>We may update this Privacy Policy from time to time. We will notify you of any material changes by:</p>
        <ul>
            <li>Posting the updated policy on our website</li>
            <li>Sending you an email notification</li>
            <li>Displaying a notice in our application</li>
        </ul>
        <p>Your continued use of our service after changes become effective constitutes acceptance of the updated policy.</p>

        <hr style="margin: 40px 0;">
        <p style="text-align: center; color: #7f8c8d; font-size: 14px;">
            <strong>This Privacy Policy is effective as of January 2025 and applies to all users of the StillOnTime service.</strong>
        </p>
    </div>
</body>
</html>