Google Calendar · Privacy

Google Calendar privacy notice

This notice explains how Front's Codex ("Codex") handles data obtained through its optional Google Calendar integration. It is intentionally limited to Google Calendar data and is not a complete privacy policy for every feature in Front's Codex. Operated by Frontiverse; privacy contact: front.olilang@gmail.com.

Private app access

Front is the sole intended user of Codex. Cloudflare Access is configured to restrict the app and its APIs to Front's account. This privacy notice is public; the OAuth consent screen and this notice do not grant access to the app.

What Codex accesses

When Front chooses to connect a Google account, Codex requests the scopes calendar.calendarlist.readonly and calendar.events. The first lets Codex list calendars and use their IDs, names, time zones, and access roles to show which calendars are available. The second lets Codex read and edit calendar events for the synchronization features Front chooses to use. This integration does not request Google's profile or email scopes.

For calendars Front selects, Codex imports events and stores information needed to display and synchronize them. Depending on the event and sync state, this can include titles, dates, start and end times, all-day status, locations, video links, notes, recurrence details, event and calendar identifiers, event versions, and sync or conflict status. Selecting a calendar enables its events to be imported; selection alone does not publish Codex-only events to Google. Codex sends event changes to Google only for events explicitly linked to a Google Calendar destination or when Front chooses an available conflict-resolution action.

How data is used and shared

Calendar data is used only to provide calendar selection, event import, synchronization, and conflict review in the personal workspace. Codex does not use Google Calendar data for advertising, sell it, or disclose it to data brokers or information resellers. Codex does not use Google Calendar data to develop, improve, or train generalized or non-personalized AI or machine-learning models. The integration does not automatically send Google Calendar data to Codex's AI feature.

Cloudflare provides the Worker and database infrastructure that processes and stores sync data on Front's behalf. Google receives the requests and event data needed to read calendars and carry out event changes Front explicitly linked or requested. These providers process data to operate the requested integration; Codex does not otherwise share Google Calendar data with third parties.

Storage and security

Google refresh tokens and linked event details are encrypted at rest in Cloudflare D1 using AES-GCM. The Worker can decrypt them to perform background synchronization, so this storage is not end-to-end encrypted. Calendar IDs, calendar names, time zones, access roles, account-routing identifiers, event details, and sync metadata are processed or stored as needed for calendar selection and synchronization. Calendar data also passes through Front's browser and may remain in Codex's local browser storage.

Retention and deletion

While a Google account is connected, its server-side Calendar data is retained to provide synchronization; there is no scheduled automatic expiry. When you disconnect an account in Calendar Setup, Codex attempts to revoke the Google authorization and removes the account token, calendar list, sync state, event mirrors, and queued review data from its active Worker database. If Google cannot confirm revocation, you can revoke Codex in your Google Account security settings.

Disconnecting does not delete events already in Google Calendar. Events previously imported into Codex may remain in that browser's local Codex data until you delete them there. Disconnecting removes their Google connection rather than erasing those local event records.

Removal from the active Worker database is not a promise of immediate deletion from provider-managed backups or operational records. Those may be retained under the applicable service providers' retention practices.

For a privacy or deletion request concerning Google Calendar data, contact front.olilang@gmail.com. Google data is subject to Google's own privacy terms and controls.

Google API Services User Data Policy

Front's Codex will use and transfer information received from Google APIs in adherence to the Google API Services User Data Policy, including its Limited Use requirements.