Your data, in plain English.

Happenin' COS ("we," "us," or "Happenin'") runs happenincos.com, a subscription calendar feed of Colorado Springs events. This policy explains what we collect, why we collect it, and what we do with it. If a section is unclear, email us at happenincos@gmail.com and we'll fix the wording.

What we collect

• Email address. Used to sign you in, send receipts, and email account notifications.
• Payment info. Card numbers and billing details are processed and stored by Stripe. We never see or store your card number. We only see the subscription status (active, trialing, cancelled) and a Stripe customer ID.
• Google Calendar access (optional). If you choose to connect Google Calendar, we receive an OAuth token that lets us create one calendar in your account and push events to it. See the next section for the full scope.
• Basic usage logs. Standard server logs (IP, user agent, page URL) used to keep the service running and detect abuse. We do not sell or share these.

Google user data

This section explains exactly what Google data we access, what we do with it, and what we never do. Connecting Google Calendar is optional. You only reach this flow if you choose it.

What Google data we access

When you connect Google Calendar, we request the Google Calendar scope (the calendar scope, https://www.googleapis.com/auth/calendar). Google shows you this permission on the consent screen before you approve it.

What we do with it

We use that access to create a single new calendar in your Google account named "Happenin' Colorado Springs" and to insert local Colorado Springs event listings into that one calendar. As new events are scraped, we keep that calendar up to date. That is the entire purpose of the access.

What we do not do

• We do not read any of your existing calendars or events.
• We do not modify or delete any of your existing calendars or events. We only write to the one calendar we create.
• We do not use Google user data to train AI models or to show you ads.

How we store Google data

We store two things in our database: the OAuth refresh token, solely so we can push event updates to your calendar, and the calendar ID, solely so we know which calendar to update. We do not store any other Google data. The refresh token is never shared with anyone and is not used for any other purpose.

Data retention

We keep the refresh token and calendar ID for as long as your subscription is active. When you cancel, we delete the "Happenin' Colorado Springs" calendar and every event we created in it, and then we delete the stored refresh token and calendar ID from our database. You can also revoke our access at any time at myaccount.google.com/permissions, which stops all syncing immediately.

Data sharing

We do not sell, share, or transfer your Google user data to any third party. The only service that ever receives this data is Google itself, when we write events back to the calendar we created for you.

Deleting your Google data

You can have your Google data deleted in either of two ways. Cancel your subscription, which automatically deletes the calendar we created along with the stored refresh token and calendar ID, or email us at happenincos@gmail.com and ask us to delete it. Either way, the stored token and calendar ID are removed from our database.

Google API Services User Data Policy

Happenin's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Why we collect it

• To deliver the subscription calendar feed you signed up for.
• To push event updates to your Google Calendar (only if you chose to connect it).
• To process payments and manage your subscription.
• To send you account and billing emails.

That's it. We don't use your data to build advertising profiles, train AI models, or anything else.

Third parties

We use a small number of trusted services to run Happenin'. Each one only sees the data it needs to do its job.

• Stripe processes payments and stores billing info.
• Resend delivers our emails (welcome notes, weekly digests, reminders), so it receives your email address.
• Supabase hosts our database (your email, subscription status, calendar tokens).
• Vercel hosts the website and serves the calendar feed.
• Google Calendar API receives the events we push to the calendar we created in your account, if you opted in.

Data retention

We keep your subscriber data (email, subscription status, calendar tokens) for as long as your subscription is active.

When you cancel, your subscription ends at the close of the current billing period. After that, we stop pushing new events, and if you had connected Google Calendar we delete the calendar we created and remove the stored refresh token and calendar ID (see the Google user data section above). We retain the bare minimum of billing records required by law. You can delete the rest yourself anytime in Account settings or by emailing happenincos@gmail.com.

Your choices

• Cancel. Cancel anytime through the Stripe billing portal linked from your dashboard.
• Disconnect Google Calendar. Revoke access at myaccount.google.com/permissions.
• Delete your account and data. Go to Account settings and choose "Delete my account." It removes your account, preferences, saved events, reminders, calendar sync, and activity history, and cancels any active subscription immediately. If you'd rather we do it, email happenincos@gmail.com and we'll handle it for you.

Security

We use HTTPS everywhere, secrets are stored in encrypted environment variables, and access to the database is restricted by role. No system is perfectly secure, but we take reasonable steps to protect your data.

Changes to this policy

If we make a meaningful change, we'll update the date at the top of this page and, where appropriate, email subscribers about it. Continued use of Happenin' after a change means you accept the updated policy.

Contact