Privacy Policy

Papan ("we", "the app") helps you organize work with boards, cards, a planner, and optional Google Calendar and Gmail integrations. This policy explains what we collect, why, and what control you have.

Information we collect

• Account data: email, display name, avatar image.
• Content you create: boards, lists, cards, comments, checklists, attachments, personal inbox items.
• Integration data: when you connect Google Calendar or Gmail, we store encrypted OAuth tokens and only read the events/messages needed to show them in the app.
• Optional notifications: Telegram chat ID if you enable reminders.
• Technical data: basic logs and error reports used to keep the service working.

How we use it

We use your data to operate the product: render your boards, sync calendar events, turn emails into cards when you ask, send the reminders you enable, and secure your account. We do not sell your data and we do not use your email or calendar content for advertising.

Google user data

Access to Google APIs is granted by you through Google OAuth and can be revoked at any time from your profile page or from your Google Account permissions. We request the minimum scopes required (read calendar events, create events you schedule, read and send email you act on). Google user data is never transferred to third parties except as needed to run the service, and is deleted when you disconnect the account.

AI features

When you use AI features (summaries, subtasks, triage, email-to-card, agent chat), the relevant text is sent to our AI provider to generate a response. It is not used to train models.

Storage, sharing and security

Data is stored on managed cloud infrastructure with row-level access rules so only you and the members of your boards or workspaces can read your content. Integration tokens are encrypted at rest. Content is shared only with people you invite.

Your choices

• Edit or delete your boards, cards and uploads at any time.
• Disconnect Google Calendar or Gmail from Profile → Google connections.
• Turn notifications off in notification settings.
• Request account and data deletion via the contact page.

Contact

Questions about this policy? Reach us through the contact page.