Privacy Policy

The short version

Information we collect

Account and purchase information

When you buy a licence we collect your name, email address, order details and licence key. Payment card details are handled by our payment processors and are never stored on our systems.

Calendar data

If you connect a calendar, we access the calendar entries needed to build your planner — event titles, dates, times, and which calendar each event came from. You choose which calendars to connect, and you can disconnect them at any time.

Calendar access is read-only. The application has no ability to create, edit or delete events in your account.

Application and device information

To operate licensing and support we record the computers authorised under your licence (device name, operating system and application version), and the e-ink device model you have configured.

Website usage

Our websites use Google Analytics to understand which pages are used. Our Learning Center records anonymous counts of which lessons are opened and how far through the audio people listen. That data is tied to a random identifier stored in your browser — it contains no name, email address or IP address, and cannot be traced back to you.

Google user data

When you connect a Google Calendar, eP CalSync requests read-only access to your calendars and their events through Google's official sign-in flow. We request read-only access only: the application cannot create, change or delete anything in your Google account, and we do not request permission to manage calendar sharing or account settings.

We use Google user data solely to:

• show you the list of calendars in your account, so you can choose which to include;
• read events from the calendars you chose, so they can be placed into your planner.

Limited Use disclosure

Revoking access

You can disconnect a calendar inside the application at any time, which removes the stored authorisation. You can also revoke access directly from your Google Account permissions page. Microsoft and Apple accounts can be revoked from their equivalent account settings.

How we protect your data

• In transit. All connections between the application, our servers and your calendar providers use TLS encryption. Calendar feed addresses must be HTTPS.
• At rest. Data stored on our infrastructure is encrypted at rest by our cloud provider.
• Authorisation tokens. Tokens that permit calendar access are stored using your operating system's secure credential store where available, and are transmitted only to the calendar provider that issued them.
• Access control. Access to production systems is limited to the small number of staff who need it to run the service, and is protected by individual accounts with multi-factor authentication.
• Minimisation. We request read-only permissions only, we read just the calendar list and the events on the calendars you choose, and we do not copy calendar data into systems that don't need it.

How long we keep it

Calendar authorisations are kept until you disconnect the calendar or delete your account. Order and licence records are kept for as long as needed to support your licence and to meet our tax and accounting obligations. Anonymous website and lesson analytics are kept in aggregate and contain nothing that identifies you.

Deleting your data

Email support@einkpads.com and ask us to delete your data. We will remove your calendar authorisations and personal records, except anything we are legally required to retain, such as invoices. Disconnecting a calendar inside the application removes that authorisation immediately, without needing to contact us.

Who we share it with

We do not sell your data. We share only what is necessary with the service providers that run parts of our business:

• Payments — to take payment and issue refunds.
• Licensing — to issue and validate your licence key.
• Cloud hosting and storage — to run our services and store your account records.
• Email delivery — to send your licence, receipts and support replies.
• Website analytics — to understand which pages are used.

Each is bound by its own agreement to use the data only to provide its service to us.

Children

Our products are not intended for children under 13, and we do not knowingly collect their information.

International transfers

We are based in the United States, and your information may be processed there. Where data is transferred from your country, we rely on appropriate safeguards provided by our service providers.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete the personal information we hold about you, and to object to certain processing. Email us and we will help — we don't require you to use a special form.

Changes to this policy

If we make a material change we will update the date at the top of this page. Continuing to use our products after a change means you accept the updated policy.