Privacy Policy

1. About this policy

Y2K Tiling is an internal workforce and job management service. This policy explains the information used to provide Google Sign-In and the optional Google Calendar connection. The internal application is available only to authorised Y2K Tiling users.

2. Google Sign-In information

When you sign in, Y2K Tiling receives and uses the Google account identifier, verified email address, and name returned by Google. It may also use the profile image URL returned by Google for the account display in the workspace. Google Sign-In is used to authenticate a user who has already been authorised in Y2K Tiling; a matching local user record and active status are still required.

Y2K Tiling does not use Google Sign-In data for advertising, profiling, or data brokerage.

3. Google Calendar access

The optional Calendar connection currently requests https://www.googleapis.com/auth/calendar.app.created. Y2K Tiling creates a dedicated secondary Google Calendar named Y2K for the connected user and stores the exact calendar identifier needed to operate that calendar.

Work assignments in Y2K Tiling control scheduling. The application creates, updates, inspects, and deletes synchronised assignment events only in the dedicated Y2K calendar. It does not intentionally use the user's primary or unrelated calendars, and Google Calendar edits do not change the schedule in Y2K.

4. Purpose and storage

Google account information is used to provide authentication. Google Calendar data and permission are used only to create and maintain the user's Y2K work-assignment calendar. Calendar access and refresh credentials are stored by the application using encrypted model attributes and are not intentionally included in logs or public responses.

Y2K Tiling does not sell Google user data or use it for advertising. Information may be processed by service providers only as needed to operate, secure, maintain, and support the service, subject to their applicable obligations.

5. Disconnecting Google Calendar

An authenticated user can disconnect Google Calendar from the Calendar settings in Y2K Tiling. The application attempts to revoke the current Google access token and removes the local connection record, including the stored calendar mapping and credentials. A calendar or events already created in the user's Google account may remain there; Google account controls can be used to remove them if desired.

6. Data retention and deletion

Y2K Tiling retains Google account identity information in the authorised local user record for as long as the account remains registered and the information is needed to authenticate and manage access. Deactivating an account prevents normal sign-in but does not by itself erase the local identity record.

When Google Calendar is disconnected, Y2K Tiling removes the local connection record, encrypted access and refresh credentials, and calendar mapping after attempting token revocation. This does not automatically delete the dedicated Y2K calendar or events already created in the user's Google account.

Where the application supports permanent deletion of an authorised Worker account, the local user record and its associated Calendar connection are removed through that account lifecycle. Other records may retain only the minimum information needed for legitimate legal, security, accounting, audit, or operational purposes.

To request deletion of personal information or ask a privacy question, contact channy@y2ktiling.com. Requests are reviewed by Y2K Tiling and handled according to the account lifecycle and any information that must be retained for the purposes described above.

7. Google API Services User Data Policy

Y2K Tiling's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

8. Contact

For privacy or support questions, contact Y2K Tiling at channy@y2ktiling.com.