Privacy Policy

Who we are

CoLoop is an independent project operated by Dæthless Music. We provide the CoLoop Discord community, Google Calendar integration, and CoJam servers at coloop.live. This Privacy Policy explains how we handle personal data, including Google user data collected through our integrations.

Data we collect

• Discord connection data: Discord user IDs, guild IDs, and the channels in which you authorize the bot. This information links your Discord account to your CoLoop calendar settings.
• Google Calendar authorization data: OAuth refresh tokens that let the CoLoop integration read your primary Google Calendar when you connect it. Tokens are encrypted using TokenCipher and stored in our Redis instance hosted at api.coloop.live.
• Calendar event metadata: Read-only access to event titles, start and end times, descriptions, and event identifiers when you run /coloop_link_calendar. We cache only the details required to show upcoming sessions inside Discord.
• Support communications: Messages you send to support@coloop.live or through our support form, along with any information you choose to include.
• Service logs: Minimal technical logs (such as timestamps and error codes) that help us keep the integration secure and reliable. Logs do not contain event content beyond what is necessary to troubleshoot issues.

How we use your data

• Provide the Discord and Google Calendar features you request, including displaying current calendar events and sending reminders you configure.
• Operate, maintain, and improve the stability and security of the CoLoop integrations and servers.
• Respond to your questions and support requests.
• Enforce our Terms of Use and prevent abuse or misuse of CoLoop services.

How we share Google user data

We do not sell or rent Google user data. Access to Google user data is limited to:

• CoLoop staff who maintain the integration and are bound by confidentiality obligations.
• Infrastructure providers that host our services (for example, our cloud hosting vendor). These providers act on our instructions and are not permitted to use Google user data for their own purposes.
• Legal requirements when we are compelled to disclose information to comply with applicable law, regulation, legal process, or enforceable government request.

We do not share Google user data with advertisers or unrelated third parties, and we do not transfer Google user data outside of CoLoop unless one of the above conditions applies.

Retention and deletion

We retain Google OAuth tokens until you disconnect your calendar. Cached calendar event data is stored in memory for no more than 24 hours and is refreshed as needed to display upcoming sessions. Support communications and diagnostic logs are kept only as long as necessary to provide the service or meet legal obligations.

You can unlink your Google Calendar at any time by running /coloop_unlink_calendar in Discord. We will immediately delete the associated OAuth tokens and cached data. You may also revoke CoLoop's access directly from https://myaccount.google.com/permissions, and our systems periodically detect revocations to remove stored data.

Your choices and rights

• Access and updates: Contact us if you need a copy of the data we maintain about your integration.
• Revocation: Use /coloop_unlink_calendar or revoke access through your Google Account security settings at any time.
• Deletion: Email support@coloop.live to request deletion of your Google user data, Discord connection data, or support communications.
• Complaints: If you reside in a region with data protection laws, you may have additional rights and can lodge a complaint with your local supervisory authority.

Data security

• OAuth refresh tokens are encrypted at rest using TokenCipher before storage in Redis.
• All communication between Discord, Google APIs, and CoLoop services uses HTTPS/TLS.
• Access to production systems is restricted to authorized administrators, and we monitor for unauthorized access.

Children

CoLoop is not directed to children under 13, and we do not knowingly collect personal data from them. If we learn that a child under 13 has used the integration, we will remove their access and delete associated data.

Changes to this policy

We may update this Privacy Policy to reflect changes to our practices or legal requirements. When we make material changes, we will update the “Effective date” above and, when feasible, notify you through Discord or other appropriate channels.

Contact us

If you have questions or want to exercise your privacy rights, email support@coloop.live or visit our support page.