Privacy Policy

1. Who We Are

CORYM ("we", "us", "our") provides founder operating intelligence by analysing calendar data to surface alignment gaps between stated priorities and actual time allocation.

2. Information We Collect

We collect only what is necessary to deliver our service:

• Account information — name, email address, and profile picture provided via Google OAuth sign-in.
• Calendar data — event titles, times, durations, locations, descriptions, attendees, and response statuses from Google Calendar. The CORYM website requests read-only access to your calendar events and never creates, changes, or deletes events or changes your calendar settings or sharing.
• Payment information — processed securely by Stripe. We do not store card numbers.
• Usage data — pages visited, features used, and device/browser metadata collected automatically.

3. How We Use Your Information

• Generate your Execution Audit and ongoing operating briefs.
• Communicate service updates, reports, and transactional emails.
• Improve our product and user experience.

4. Google Calendar Data — Limited Use Disclosure

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use calendar data to provide and improve CORYM's core analysis features.
• We do not sell, rent, or share your Google data with third parties for advertising or any unrelated purpose.
• We do not use Google data for serving advertisements.
• Human access to raw calendar data is limited to debugging and support, with your consent.

5. Data Storage and Security

All OAuth tokens are encrypted at rest using AES-256 encryption. Data is stored on secure, access-controlled servers. We retain calendar data only as long as your account is active or as needed to provide services.

6. Data Sharing

We do not sell your personal data. We share information only with:

• Stripe — for payment processing.
• Google Cloud — for text-to-speech audio generation of briefs.
• Hosting providers — for infrastructure and server operations.

7. Your Rights

You may at any time:

• Revoke calendar access — disconnect from your CORYM dashboard or via Google Account Permissions.
• Request data deletion — email us and we will delete your data within 30 days.
• Access your data — request a copy of all data we hold about you.

8. Cookies

We use essential cookies for session management and authentication. We do not use third-party tracking cookies for advertising.

9. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated effective date.

10. Contact

Questions about this policy? Email us at contact@corym.ai.