Privacy Policy

Piero ("we", "us", "our") is a productivity application that helps you plan tasks, manage your calendar, and run focused work sessions. This policy explains what personal data we collect, why, and what rights you have under the General Data Protection Regulation (GDPR) and other applicable laws.

For privacy matters, contact us at privacy@pieroplanner.com.

Account data

• Email address — required to create and identify your account.
• Authentication tokens — session tokens issued by Supabase Auth; stored in secure, HttpOnly cookies.

Content data (only when you use the app)

• Task titles, descriptions, notes, estimates, and labels you create.
• Subtasks, time-box schedules, and Pomodoro session records.

Google Calendar data (only if you connect)

• OAuth access and refresh tokens — encrypted with AES-256-GCM and stored in a secure HttpOnly cookie on your device; never stored in our database.
• Calendar event titles, start/end times — fetched on demand and never stored permanently on our servers.

Waitlist

• Email address — only if you join the waitlist, together with the consent sentence you accepted and the time you accepted it.
• We use that address to email you when Piero opens. Every email includes an unsubscribe link. You can also leave the list at /waitlist/unsubscribe.

Technical data

• Server-side request logs (IP address, user agent, timestamp) retained for up to 30 days for security and abuse prevention.
• Website analytics (Vercel Web Analytics) — aggregated, cookieless statistics about how visitors use our site (for example pages viewed and anonymised interaction events such as button clicks). We do not use this tool to read the content of your tasks or calendar, and we do not send your email address or other account identifiers to Vercel as part of these events. Vercel may process a truncated IP address and device/browser metadata to generate statistics. See section 4 for how this relates to cookies.
• No advertising trackers and no cross-site profiling for ads.

• Contract performance — providing the core app service (account, tasks, calendar).
• Legitimate interest — server logs for security monitoring and abuse prevention.
• Legitimate interest — aggregated, cookieless website analytics to understand how Piero is used and to improve the product, balanced against your privacy (no advertising profiles, no sale of data). You may object by contacting us at privacy@pieroplanner.com.
• Consent — optional preference cookies beyond what is strictly necessary. You can withdraw consent at any time via the cookie settings link in the footer.
• Consent — waitlist emails. The box starts unchecked. You can withdraw at any time from the unsubscribe link in every email, or from the leave-the-list page.

We use only the cookies necessary to operate the service (and optional preference cookies if you allow them in the cookie banner):

• sb-* (Supabase session) — keeps you signed in. HttpOnly, Secure, SameSite=Lax. Expires with your session or after 7 days.
• piero_gcal — stores your encrypted Google Calendar tokens if you connect. HttpOnly, Secure. Expires after 30 days.
• piero_oauth_state — one-time CSRF token used during Google OAuth. Expires after 10 minutes.

Vercel Web Analytics does not use cookies on your device. It collects aggregated usage data as described in section 2. Because it is cookieless, it is not listed as an analytics cookie in the banner and does not require cookie consent under the ePrivacy rules that apply to storing information on your device.

None of our cookies track you across other websites or share data with advertisers.

We do not sell, rent, or share your personal data with third parties for marketing. Data is shared only with:

• Supabase (EU West-1, Ireland) — database and authentication infrastructure. Supabase Privacy Policy.
• Vercel — hosting, edge network, and cookieless Web Analytics as described above. Vercel Privacy Policy.
• Google — only when you initiate Google Calendar sync. Google Privacy Policy.

• Your account and all content data are kept as long as your account is active.
• Deleting your account permanently removes all associated data within 30 days.
• Server logs are purged after 30 days.
• A waitlist address is kept until you unsubscribe or ask us to delete it.

If you are in the EU/EEA or UK, you have the right to:

• Access — request a copy of the data we hold about you.
• Rectification — correct inaccurate data.
• Erasure — delete your account and all associated data ("right to be forgotten").
• Restriction — ask us to pause processing while a complaint is resolved.
• Portability — receive your data in a machine-readable format.
• Objection — object to processing based on legitimate interest.
• Withdraw consent — at any time for consent-based processing, without affecting prior processing.

To exercise any right, email privacy@pieroplanner.com. We will respond within 30 days.

We implement technical and organisational measures proportionate to the risk, including: TLS in transit, AES-256-GCM encryption for OAuth tokens, Row-Level Security on all database tables, CSRF protection, and rate limiting on all API endpoints.

Our infrastructure (Supabase, Vercel) operates within the EU or uses Standard Contractual Clauses for transfers outside the EEA, in compliance with GDPR Chapter V.

Piero is not directed at children under 16. We do not knowingly collect data from minors. If you believe a child has provided us data, contact us and we will delete it promptly.

We may update this policy. Material changes will be communicated by email or an in-app notice at least 14 days before they take effect. The "Last updated" date at the top reflects the most recent revision.

Email: privacy@pieroplanner.com

If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority. If you are in Estonia, this is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon). Other EU/EEA residents may contact the supervisory authority in their country of residence.