Beta draft — not yet reviewed by a lawyer
Privacy policy
Effective October 22, 2026
The short version
- We collect your data to run the app: your account, your work calendar, your trips and friends, and payment records.
- Your calendar is yours. Friends see group totals like “4 of 5 can go”, never your PTO balance, holidays, blocked dates or notes.
- We don’t sell your data, show ads or use tracking cookies or analytics.
- No AI reads your data. Date suggestions come from fixed math, not an AI model (details).
- Four companies help us run the service, and each is named below.
- All file storage is private. You can delete any photo you upload, or your whole account, from Profile at any time.
- Cancelling is one tap, and we email you 30 days before a yearly plan renews.
What we collect
We collect personal information when you use outofoffice. Here is all of it:
- Account: your email address, a password (stored only as a one-way hash, which nobody can read back), your name, your username and, if you add one, a profile photo. We also save your time zone so reminders arrive at sensible times.
- Your work calendar: PTO balance and yearly allowance, carryover, the holidays your employer observes, closures, approved leave, blocked dates and the notes you write on them.
- Trips and friends: the trips you create or join, invites, votes on dates, whether you’ve booked, friend requests, friends and people you block, badges and the plan links you choose to share, including their preview picture.
- Your choices: privacy settings (such as availability sharing, free/busy and which trips show on your profile) and email notification settings.
- Payments: which plan you bought, the amount, the date and Stripe’s reference numbers. Your card details go straight to Stripe. We never see or store your card number.
- Notifications: a record of the notifications we sent you, so the bell can show them.
- Security data: a count of recent actions (like how many trips you created in the last day) to stop abuse, and the IP address and browser details that our hosting and login providers record in their logs.
- Your browser’s storage: the app keeps your sign-in session and a few settings in your browser’s local storage. In demo mode, everything stays there and is never sent to us.
We don’t use advertising cookies, tracking pixels, analytics tools or fingerprinting, and we don’t buy data about you from anyone. Our Cookie policy lists everything stored in your browser.
How we use it
- To run the app: plan your PTO, find dates that work for a group, and run trips, friends and badges.
- To send the emails you asked for, plus the ones we must send: sign-in links, password resets, receipts and renewal reminders. Every optional email has a one-click unsubscribe link, and each kind can be turned off on Profile. We never send marketing email.
- To take payments and unlock trips.
- To keep the service safe: stopping bots and spam, rate limits, and investigating problems.
When you include your availability in a trip, our server reads your calendar to work out the group’s best dates and stores only group totals. Other people on the trip see results like “4 of 5 can go” and the group’s total PTO, never your own numbers. Free/busy signals on proposed trips (“Free”, “Has the PTO”, “Probably can’t”) appear only if you turn them on.
How AI is and isn’t used
- The app doesn’t use AI on your data. Your best days off and the group’s dates are worked out by fixed, step-by-step calculations that we wrote and test. They give the same answer every time. No AI model, chatbot or machine-learning service reads your calendar, trips, messages or profile.
- We send nothing to AI companies. None of your information is used to train an AI model, by us or anyone else.
- We use AI to build the product. Parts of outofoffice’s code and wording were written with help from AI coding tools, and a person reviews that work. Those tools never receive your personal data.
- Any future AI feature comes with these promises. Before it launches, we’ll update this policy and name the AI provider. It will be off for you until you choose to use it, and your data won’t be used for training. It also won’t give information or encouragement about self-harm or suicide. If anything you write suggests you might be in crisis, it will stop and point you to people who can help right away, like the 988 Suicide & Crisis Lifeline (call or text 988 in the U.S.).
Who we share it with
We don’t sell or rent your personal information, and we don’t share it for advertising. These are the only companies that receive it, and each one gets only what its job needs:
| Company | What it does for us | What it receives |
|---|---|---|
| Supabase | Database, sign-in, private file storage and our server code | Everything stored in your account, including your calendar and photo |
| Cloudflare | Hosts the website, makes link previews and calendar files, runs the Turnstile bot check, and forwards email to our support inbox | Your IP address and browser details on every visit; the trip details inside an “Add to calendar” link; anything you email us |
| Resend | Sends our emails | Your email address and the content of each email (such as a friend’s name or a trip’s dates) |
| Stripe | Takes payments | Your card and billing details (entered on Stripe’s own page), your email and which plan you bought |
Fonts and code libraries are served from our own site, so visiting outofoffice. doesn’t contact Google or other content networks.
Only when you choose: if you tap “Add to calendar” and pick Google Calendar or Outlook, that trip’s name and dates go to Google or Microsoft. If you send a shared plan link in a messaging app, that app fetches the link’s title and preview picture.
Other people in the app see only what the app shows them. For example, friends see your name, username and photo, and people on your trips see that you joined and whether you’ve booked. Profile → Privacy shows exactly what friends can see.
The law: we share information if the law requires it, to protect people’s safety, or with a company that takes over outofoffice. (which would have to keep these promises).
Your uploads and storage
- Every storage bucket is private. Nothing you upload sits at a public web address.
- Profile photos are cropped and re-saved on your own device before upload, which removes location and camera details. Only you, your friends and people on your trips can see your current photo, through links that expire after a short time. When you change or remove a photo, the old file is deleted.
- Shared plan pictures can be seen only by someone who has the link, and they’re deleted the moment you stop sharing it.
- Deleting on request: remove your photo on Profile, stop sharing a plan link on My PTO, or delete your account, and the files are deleted right away. You can also email us to ask that any upload be deleted, and we’ll do it within 30 days.
Your choices and rights
- See and change your data: almost everything is on Profile and My PTO. Email us for a copy of everything we hold about you.
- Delete your account: Profile → Your data → Delete my account. This deletes your login, email address, photo, calendar, friends, shared links and the trips you organize, and cancels any yearly plan right away. If you can’t sign in, email us from your account’s address and we’ll delete it within 30 days.
- Turn emails off: use the unsubscribe link in any optional email, or Profile → Email notifications. We still send emails you need: sign-in links, receipts and renewal reminders.
- Cancel a yearly plan: one tap, at Profile → Your plan → Cancel my plan. Other ways to cancel, including without signing in.
Depending on where you live (for example, California), you may have the right to know, access, correct and delete your personal information, and to opt out of its sale or sharing for advertising. We don’t sell or share it, so there is nothing to opt out of. We won’t treat you differently for using these rights. To use any of them, email us; we may need to confirm that the request comes from the account’s email address.
What you see is real
We don’t publish fake reviews, testimonials, endorsements or user counts, and we don’t pay for reviews that don’t say they were paid. Sample people, trips and numbers in the demo and on our website are labeled as examples. Prices are only ever the real prices you’ll pay.
How long we keep it
We keep your data while your account exists. In-app notifications are deleted after 90 days, email records after 30 days, and abuse-prevention counts after a day. When you delete your account, your data is removed right away, though copies can remain in our providers’ encrypted backups for up to 30 days. We keep payment records, and Stripe keeps its own, for as long as tax law requires.
Security
All traffic is encrypted (HTTPS). Database rules let each person read only what they’re allowed to see, and automated tests check those rules. Passwords are hashed, and sign-ups and sign-ins are protected by a bot check and rate limits. No system is perfectly secure. If a breach affects your information, we’ll tell you as the law requires.
Children
outofoffice. is for working adults and isn’t meant for anyone under 16. We don’t knowingly collect information from children under 13. If you think a child has signed up, email us and we’ll delete the account.
Changes to this policy
If we change this policy in a way that matters, such as a new kind of data, a new company we share with, or an AI feature, we’ll email you before it takes effect and update the date at the top.
Contact
outofoffice. is run by [LEGAL BUSINESS NAME], [BUSINESS MAILING ADDRESS]. For questions, data requests or deletion requests, email support@mail.projectoravelle.us.