← Commonhour
Privacy Policy
Effective date: September 19, 2026
1. Information We Collect
Information you give us directly:
- Your name and email address, when you create or respond to a plan
- The plan details you enter: plan name, dates, time window, location or meeting link, and your marked availability
- If you create an account: your email, and a password if you choose that sign-in method
- If you email us for support: whatever you include in that message
Information collected automatically:
- Standard technical data (IP address, browser type, device type) collected by our hosting provider
- Cookies and local storage used to keep you signed in and remember your admin status on a plan you organized
2. How We Use Information
- To run the core service: matching everyone's availability, showing the group heatmap, and generating the calendar invite (Google Calendar / Outlook / .ics) with names and emails pre-filled
- To send you sign-in emails (a magic link or a one-time code) if you use passwordless sign-in
- To save your plan history if you create an account ("My Plans")
- To detect and prevent abuse (for example, the response cap on no-account plans)
We do not sell your personal information, and we do not use your name/email/availability data to train any AI model.
3. Who We Share Information With
We use a small number of service providers to run Commonhour, each of whom only sees what they need to do their job:
| Provider | What they handle |
|---|
| Supabase | Database, authentication (magic link, OTP, password) |
| Resend | Delivery of sign-in and notification emails |
| Cloudfare | Website hosting |
We don't share your data with anyone else, and none of these providers are permitted to use your data for their own purposes beyond providing the service to us.
4. Data Retention and Deletion
- Anonymous (no-account) plans cap at 12 respondents.
- Any plan auto-deletes 10 days after its booked meeting date, once the organizer has picked a final time.
- If a plan is never booked, it auto-deletes 30 days after the last listed candidate date, so unresolved plans don't sit indefinitely.
- The organizer (or account owner) can manually delete a plan at any time, which removes it and every response immediately.
- If you'd like your account or data deleted sooner than these windows, email us (see Section 9) and we'll remove it.
5. Your Rights
Depending on where you live, you may have rights to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Object to or restrict certain processing
- (California residents) Know what categories of data we collect and opt out of any "sale" — note we do not sell personal information
To exercise any of these, email us at [email protected].
6. Children's Privacy
Commonhour is not directed at children under 13 (or under 16 in regions where that's the applicable age), and we don't knowingly collect data from them. If you believe a child has provided us data, contact us and we'll delete it.
7. Security
We use industry-standard measures (encrypted connections, Supabase's row-level security, hashed passwords) to protect your data, but no online service can guarantee absolute security.
8. Changes to This Policy
If this policy changes materially, we'll update the effective date above. Continued use of Commonhour after a change means you accept the updated policy.
9. Contact Us
Questions about this policy or your data: [email protected]