privacy policy

the parsi project ("we", "us", "our") operates theparsiproject.com. this policy explains what data we collect, why, and how we protect it.

1. information we collect

account information: when you sign in with google, we receive your name, email address, and profile picture from google. we do not receive or store your google password.

contacts you add: if you use roj wisher, you may add contacts with names, dates of birth, and/or zoroastrian roj and mah birthdays. this data is stored securely and only visible to you.

calendar data: if you choose to sync with google calendar, we request access to create and manage a dedicated "roj wisher" calendar in your google account. we only read and write events in this specific calendar — we never access your other calendars, events, or personal schedule.

usage analytics: we use google analytics to collect anonymous usage data (pages visited, load times). this does not identify you personally.

2. how we use your information

• to provide and maintain the parsi project services
• to manage your roj wisher contacts and birthday reminders
• to create calendar events for your contact birthdays (only if you opt in to google calendar sync)
• to improve the site based on anonymous usage patterns

3. google calendar access

google calendar sync is entirely optional. when you click "sync to google calendar" in roj wisher, you will be asked to grant the parsi project permission to manage your google calendar. specifically, we request the https://www.googleapis.com/auth/calendar scope.

what we do with calendar access:

• create a single dedicated calendar called "roj wisher" in your google account
• add birthday and roj birthday reminder events for your saved contacts to that calendar only
• update or remove events when you edit or delete contacts
• store an encrypted refresh token to keep events up to date without requiring you to re-authorize

what we do NOT do:

• we never read, modify, or delete any of your existing calendars or events
• we never access your calendar data for advertising, analytics, or any purpose other than creating roj wisher reminders
• we never share your calendar data with any third party
• we never transfer your google calendar data to any other service or person

you can revoke calendar access at any time from your google account permissions. revoking access will stop future event syncing but will not delete events already created in your calendar.

4. google api services — limited use disclosure

the parsi project's use and transfer of information received from google apis adheres to the google api services user data policy, including the limited use requirements. specifically:

• we only use google calendar data to provide and improve the roj wisher birthday reminder feature
• we do not transfer google calendar data to third parties unless necessary to provide the service, required by law, or part of a merger/acquisition with equal privacy protections
• we do not use google calendar data for advertising or to serve ads
• a human may read your calendar data only with your explicit consent, for security purposes, to comply with law, or when aggregated and anonymized for internal operations

5. data storage and security

your data is stored on supabase (hosted on aws). all data is encrypted in transit (tls) and at rest. row-level security ensures that only you can access your own contacts and settings. google refresh tokens are stored encrypted and are never exposed to the client-side application.

6. data sharing

we do not sell, rent, or share your personal data with third parties. your data is only processed by:

• google: your name and email (for authentication), and calendar events (only if you opt in to google calendar sync)
• supabase: our database and authentication provider (data stored on aws infrastructure)
• google analytics: anonymous, non-identifying usage statistics only

7. data retention and deletion

your data is retained as long as your account is active. you can delete individual contacts at any time, which also removes their associated calendar events. to delete your account and all associated data (including stored tokens), email us at the address below and we will process your request within 30 days.

8. cookies

we use essential cookies for authentication (keeping you signed in) and google analytics cookies for anonymous usage tracking. we do not use advertising or tracking cookies.

9. children's privacy

the parsi project is not directed at children under 13. we do not knowingly collect data from children.

10. changes to this policy

we may update this policy from time to time. changes will be posted on this page with an updated date.

11. contact

if you have questions about this privacy policy or want to request data deletion, email us at talati15@gmail.com.