Privacy Policy

1. Overview & Commitment

Pamplemousse is a personal life and work management workspace designed to help you track commitments, cultivate relationships, and focus on what matters. We believe your personal life is not raw material for advertisers or data brokers.

This Privacy Policy explains what information we collect, why we collect it, how it is stored and handled, and the strict controls you have over your data.

2. Information We Collect

We only collect personal information that is necessary to provide, secure, and improve our services:

• Account & Identity Information: When you create an account or sign in—whether using email and password, Google OAuth, or Clerk authentication—we receive basic profile details such as your name, email address, avatar or profile picture, and a unique user identifier.
• Workspace & User Content: Information you voluntarily create and organize inside your workspace, including Groves (life domains and contexts), Grapefruits (projects), Seeds and Sprouts (tasks and action items), Branches (contacts, mutual relationships, and connection notes), Pulp (notes, documents, spreadsheets, and files), and custom tags.
• Integration Data (Google APIs): If you choose to connect third-party integrations such as Google Sign-In or Google Calendar, we receive OAuth tokens and authorization metadata to access the specific scopes you have approved. If calendar integration is enabled, we access calendar event metadata (titles, start/end times, attendee status) solely to display and synchronize scheduled commitments in your timeline.
• Technical & Diagnostic Data: IP addresses, browser type, operating system version, request timestamps, and application error logs required to maintain platform security, prevent abuse, and diagnose service outages.

3. How We Use Your Information

We use collected data solely for legitimate product and operational purposes:

• To provision, authenticate, and maintain your personal workspace.
• To store, synchronize, and display your commitments, relationships, notes, and tasks.
• To fulfill user-initiated integrations (such as calendar sync or Google single sign-on).
• To send critical transactional notifications, such as account verification, invite updates, or resolution emails for bug reports.
• To detect, investigate, and prevent fraudulent access, technical errors, and security incidents.

4. Google API Services User Data Policy & Limited Use Disclosure

Pamplemousse offers optional integrations with Google services, including Google Sign-In and Google Calendar synchronization. We hold Google user data to the highest privacy and security standards.

Pamplemousse's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, our handling of Google user data adheres to the following strict principles:

• No Advertising: We never use, transfer, or disclose Google user data to serve advertisements, including personalized, retargeted, or interest-based advertising.
• No Sale of Data: We never sell Google user data to any third party, data broker, or commercial aggregator.
• No Model Training: We do not use Google user data to train, fine-tune, or improve generalized AI or machine learning models.
• Restricted Human Access: No human at Pamplemousse reads your Google data unless: (a) you have provided explicit affirmative consent to inspect a specific issue for customer support or debugging; (b) it is required for security purposes (such as investigating system abuse or vulnerabilities); (c) it is required to comply with applicable law; or (d) the data is aggregated and anonymized for internal operational metrics.

5. Data Sharing & Third-Party Processors

We do not sell, rent, or monetize your personal information. We share data only with trusted service providers subject to strict contractual confidentiality and security commitments:

• Cloud Hosting & Compute: Vercel (application hosting and global edge network).
• Managed Database: Neon (encrypted Postgres database infrastructure).
• Identity & Authentication: Clerk and Google Identity (secure authentication and session management).
• Transactional Email: Resend (system alerts, invite dispatch, and feedback updates).
• File Storage: Cloud object storage (encrypted storage for user-uploaded documents and attachments).

We may also disclose information if required by a court order, subpoena, or lawful request from public authorities, or to protect the safety and legal rights of Pamplemousse and its users.

6. Data Retention, Control & Deletion

You retain ownership and control of your information. You can edit, modify, or delete any record in your workspace directly through the application interface.

• Account Deletion: You may request complete deletion of your account and all associated workspace data at any time by contacting us at info@pamplemousse.app. Upon confirmation, your data will be permanently purged from active production databases.
• Revoking Google Access: You can disconnect your Google account or revoke Pamplemousse's permissions at any time via your Google Account Security Settings.

7. Security Safeguards

We employ industry-standard technical and organizational safeguards to protect your personal data, including TLS/HTTPS encryption in transit for all web and API traffic, encryption at rest for database and storage layers, strict session verification, and restricted administrative access.

8. Contact Information

If you have questions, feedback, or data privacy requests concerning this policy, please reach out to our team:

Email: info@pamplemousse.app
Website: https://pamplemousse.app