PCC privacy policy
This policy describes how PCC Personal Command Center, operated by Shanks Media Group, accesses, uses, stores, and shares information when you use PCC and its optional Google Calendar integration.
Google Calendar access and permissions
A PCC administrator must explicitly authorize a Google account before PCC accesses its calendars. PCC requests these permissions:
https://www.googleapis.com/auth/calendar.events(calendar.events): permits viewing and editing events on calendars accessible to the connected account. PCC uses event access to synchronize linked tasks and calendar events.https://www.googleapis.com/auth/calendar.calendarlist.readonly(calendar.calendarlist.readonly): permits reading the account's calendar list, including calendar identifiers and names, so an administrator can select calendar mappings. It does not permit PCC to modify that calendar list.
The event permission is broader than the subset of events PCC links to tasks. During reconciliation PCC may receive other events from a selected calendar; unrelated events are not imported as PCC tasks. PCC does not request Gmail or Google Drive access through these Calendar scopes.
How PCC uses Calendar data
PCC uses calendar identifiers, event identifiers, titles, dates, times, time zones, durations, recurrence, event status, and version information to synchronize tasks, detect changes or deletions, and present conflicts. It stores synchronization snapshots and conflict/activity records to track linked events and user decisions. Conflict records can retain the event data returned by Google, including descriptions, locations, or attendee information when present.
When a task synchronizes to Google, PCC sends its title, schedule and recurrence, plus a description that can include the PCC task identifier, entity, client/project, department, and task notes. Choose calendars and task content with their Google sharing settings in mind: people who can view those calendar events may see this information. PCC task attachments are not uploaded to Google Calendar by this integration.
Storage and security
Hosted PCC stores task/account records, calendar mappings, linked-event metadata, synchronization state, and conflict records in a PostgreSQL database hosted by Neon. OAuth access and refresh tokens are encrypted before storage using authenticated encryption; the encryption key is held in server environment configuration separately from the database. Passwords are hashed, and server sessions are validated before private data access.
Vercel hosts the application and Private Blob attachment storage. Private task, account, and attachment routes require authentication and applicable permissions. Operational records may include request paths, timing, status, and security events; PCC's application handlers do not intentionally log passwords, OAuth tokens, session tokens, or secret values.
Sharing and purpose limits
PCC exchanges authorized calendar data with Google to provide synchronization. Vercel and Neon process information as hosting and storage providers for PCC. Authorized PCC users and administrators may access records according to their permissions; Google calendar viewers may see synchronized events according to Google sharing settings.
Google user data is not sold or used for advertising. PCC does not use Google Calendar data to train generalized AI or machine-learning models. Google data is used to provide and maintain the authorized task/calendar functionality, not for unrelated marketing.
Your choices, retention, and deletion
Synchronization is user-controlled: administrators choose the connected account and mapped calendars, and users can enable or disable Calendar synchronization for tasks. Once enabled, PCC can synchronize automatically using notifications and scheduled reconciliation. Users can review conflicts and choose which version to keep.
An administrator can disconnect Google in PCC, which removes the stored OAuth credentials and deactivates PCC's watch channels. You can also revoke PCC's access in your Google Account connections. Disconnecting or revoking access does not automatically delete existing PCC tasks, stored event metadata, conflict/activity history, or events already in Google Calendar. Disabling task synchronization or deleting a PCC task can leave its Google event in place.
PCC retains records while needed for its task management and synchronization functions; it does not currently provide an automatic retention deadline for every record. To request access, correction, or deletion of retained PCC data, contact the Shanks Media Group administrator who manages your PCC account. Backup copies may retain records until the operator's backup retention process removes them. Manage remaining Google Calendar events directly in Google Calendar.