Privacy Policy
Last updated: March 2026
Who we are
Mark ("the app", "we", "us") is a personal productivity tool that helps you create Google Calendar events from natural language descriptions. Mark is operated by Josh Siegel. You can contact us at jsiegel@gmail.com.
What data we collect
When you sign in with Google and use Mark, we collect:
- Your Google account information — your name, email address, and profile picture, provided by Google when you sign in.
- Google Calendar access — we create calendar events on your behalf when you confirm them in the app. We do not read your existing calendar events.
- Google Contacts access — we search your contacts to suggest people to invite to events. We do not store your contacts.
- Event data you enter — descriptions, event titles, dates, times, and locations you type or upload are sent to the AI service to be parsed. We store the resulting events and invite history in our database to improve future suggestions.
- Authentication tokens — we store encrypted Google OAuth tokens to allow the app to create calendar events on your behalf.
How we use your data
- To create Google Calendar events when you request it
- To suggest contacts you have previously invited
- To maintain your session so you stay signed in
We do not sell your data. We do not use your data for advertising.
Third-party services
Mark uses the following third-party services to operate:
- Google APIs — for sign-in, calendar creation, contacts search, and location data. Subject to Google's Privacy Policy.
- Anthropic Claude AI — event descriptions you enter are sent to Anthropic's API to be parsed into structured event data. Subject to Anthropic's Privacy Policy.
- Neon — our database provider, used to store your account and event history. Hosted in the United States.
- Vercel — our hosting provider. Subject to Vercel's Privacy Policy.
Data retention and deletion
We retain your account data and event history for as long as you use the app. To request deletion of your data, email jsiegel@gmail.com and we will delete your account and all associated data within 30 days.
You can also revoke Mark's access to your Google account at any time by visiting Google Account Permissions.
Security
Google OAuth tokens are encrypted at rest using AES-256-GCM encryption. We use HTTPS for all data transmission.
Changes to this policy
We may update this policy from time to time. We will update the date at the top of this page when we do. Continued use of Mark after changes constitutes acceptance of the updated policy.
Contact
Questions about this policy? Email us at jsiegel@gmail.com.