DueSlotPrivacy policy
This policy explains how Nostello OÜ (“Nostello”, “we”), Ahtri Street 12, 15551 Tallinn, Estonia, handles personal data for DueSlot. We are an EU company and apply the GDPR. Privacy officer: Sheldon Halgreen, privacy@noscotek.co.za.
1. What happens to your tasks
When you sync, our service calls Microsoft Graph with a token issued for you, reads your Planner tasks, and creates or updates events only in the “Planner (DueSlot)” calendar in your mailbox. Titles and event bodies are sent to Microsoft Graph for that calendar and are not written to our database, logs or telemetry.
2. What we process
| Data | Why | Basis | Kept |
|---|---|---|---|
| Microsoft account object ID and organisation (tenant) ID, from the verified Microsoft sign-in (ID) token | Identify your account, apply your plan (including complimentary Pro, which matches tenant ID only), and join a subscription to the right person | Contract (Art. 6(1)(b)) | While you use the service; deleted on disconnect or as described below |
| Encrypted Microsoft refresh token (AES-256-GCM; we do not keep the access token) | Stay signed in so Pro background sync can run, and so you don't have to sign in for every manual sync | Contract | Deleted on disconnect, when Microsoft says the grant is invalid, 30 days after last activity on a free or cancelled account, or after 90 days in a “please sign in again” state |
| Planner task IDs, calendar and event IDs, due dates, and a keyed hash of the task fields we use to detect changes (the hash cannot be reversed to a title) | Update the right event and skip unchanged tasks | Contract | Removed when you disconnect; unused accounts are deleted after 12 months of inactivity, or 90 days in a “please sign in again” state |
| Settings you choose (plan/bucket/category IDs, hide completed, reminder minutes, all-day or timed, time zone) | Apply filters and event layout. Display names are fetched live and not stored. | Contract | With your account |
| Billing: name, email, address, VAT number, payment status (processed by Stripe) when you buy a plan | Subscriptions and invoices | Contract and legal obligation (Art. 6(1)(c)) | As Estonian accounting law requires (7 years) |
| Sign-in email, only as a pre-fill to Stripe Checkout when you start a purchase; we do not store the address in our database | Checkout | Contract | Held by Stripe under its terms |
| Usage counts and error telemetry: event type, counts, app version, and one-way hashed account and organisation identifiers. No titles, no email addresses, no tokens | Keep the service reliable | Legitimate interest (Art. 6(1)(f)) | Sync counts 14 days; other telemetry up to 13 months |
| Rate-limit counters keyed by IP address or account, in short windows | Protect the service from abuse | Legitimate interest | Minutes to one day, then deleted |
| Licence code redemption (only if you enter a code): the fact that this account redeemed a code | Let reviewers try Pro | Contract | With your account; deleted on request |
This website sets no analytics cookies. The sign-in session uses a __Host-dueslot_s cookie that is HttpOnly, Secure and SameSite=Lax, and holds only a signed session identifier (not your token). Cloudflare, our host, sees technical connection data such as IP addresses while it delivers requests; DueSlot does not keep request logs on the Worker (observability is off).
3. Permissions we ask Microsoft for
User.Read (to identify you), Tasks.Read (to read your Planner tasks), Calendars.ReadWrite (to create and update only the “Planner (DueSlot)” calendar in your mailbox), and openid, profile and offline_access (sign-in and refresh). We do not ask to write Planner tasks in this version. You or your administrator can revoke access in Microsoft at any time.
4. Sub-processors
Cloudflare (hosting and the database that holds the records above) and Stripe (payments; card details go to Stripe and never touch our servers). See sub-processors. Microsoft processes your mailbox and Planner data under your own agreement with Microsoft; it is not our sub-processor. Some processing may happen outside the EEA under the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.
5. Your rights, retention and deletion
You can ask for access, correction, deletion, restriction, portability, or object to processing based on legitimate interest, by emailing privacy@noscotek.co.za. To delete your account data, use Disconnect and delete my data in your account, or email us from the address on your account. We delete your user record, token, task map and related rows; billing records stay as long as accounting law requires (7 years). You can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or your local authority.
6. Security
Encrypted connections, tokens encrypted at rest with a key held as a Worker secret, least-privilege Microsoft permissions, a write guard that only allows calendar paths under our own calendar, signed Stripe webhooks, no request logging on the Worker, and access to admin tools restricted by Cloudflare Access.
7. Children
DueSlot is for people with a Microsoft 365 work or school account and is not directed at children under 16.
8. Changes
We will post changes here and tell paying customers by email about material changes.