Privacy policy

Effective September 25, 2026

chahn-zah is a private workspace operated by David Carl Williams at e2inc.us for managing jobs, clients, invoices, payments, and appointments. Access to workspace records is restricted to the authorized owner.

Information the workspace handles

The workspace stores information the owner enters or uploads, including company and contact details, job information, invoices, attachments, and payment records. Email and password sign-in is handled through Supabase Authentication. The site uses session cookies to keep the owner signed in and support account security.

Google Calendar access and use

Connecting Google Calendar is optional and requires approval through Google. The requested permission allows viewing, creating, changing, and deleting events on calendars the connected account owns. The current integration uses the owner's configured primary calendar.

Calendar information returned by Google is stored to display appointments and synchronize linked jobs. This may include event titles, descriptions, dates, times, time zones, locations, organizer or attendee details when present, event identifiers, and synchronization information. Connection credentials are encrypted before storage.

Linked appointments synchronize job titles, dates, times, locations, and cancellation status. New jobs created after connection are sent to Google during synchronization. The integration does not send invoice attachments, payment amounts, billing rates, or private job notes to Google. Synchronization currently runs while the calendar page is open and catches up when it is reopened.

Gmail access and email references

Optional Gmail access imports emails from the owner's ASSIGNMENTS label, including message text, sender, dates, attachment details, and message identifiers. Google grants read access to the mailbox; chahn-zah limits imports to that label. It does not send, delete, or relabel messages. Imported emails are matched to existing jobs and clients using reference numbers and client details, with uncertain matches available for review. Message text is displayed without remote images or executable HTML. Attachments are copied to workspace storage when first downloaded, or during import when included directly in the message. Connection credentials are encrypted.

Gmail import runs while the Email references page is open and resumes when reopened. Disconnecting Gmail removes the saved Gmail connection and stops future imports, while already imported references and downloaded attachments remain. Attachments that have not been copied still require the original Gmail message and an active connection. The owner may request deletion of retained email references through the contact below.

Sending invoices by email

Send invoice uses the billing email saved for the company responsible for payment. After the owner reviews the recipient and message and presses Send now, Gmail receives the email and the current saved invoice PDF. The app requests send-only Gmail permission and account email access, or uses the owner's existing authorized backup sending connection. Gmail importing remains separate. The app stores the recipient, message, sent PDF, and delivery status with the invoice; these records are included in backups and follow the invoice's Trash and restore controls. Google connection credentials remain encrypted and are excluded from backups.

Sharing and service providers

Google processes calendar and Gmail requests, Supabase processes authentication, and Sites hosting infrastructure, including Cloudflare, processes and stores workspace data. These providers may process technical information needed to operate and protect their services. Authorized technical support may access data when needed to provide support requested by the owner.

chahn-zah does not sell Google Calendar or Gmail data or use it for advertising or training general-purpose AI models. Its use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

Retention, disconnection, and deletion

Workspace records and saved calendar information remain stored until removed by the owner or through an owner-authorized deletion request. Choosing Disconnect in the calendar stops future synchronization and removes the saved connection credentials. It does not delete previously copied event records, linked jobs, invoices, or events in Google Calendar.

Google access can also be revoked through Google Account connections. For requests to export or delete retained workspace data, contact the operator below. Service-provider backups and operational records may remain subject to those providers' retention practices.

Contact and updates

Questions and data requests: david.carl.williams@gmail.com. Changes to these practices will be reflected on this page with an updated effective date.