Privacy Policy

Last updated: July 2026

This policy explains how the Project RISHI @ UC Berkeley member dashboard (the “Dashboard”) collects and uses information. It applies to members who sign in to the Dashboard. The public pages of our website do not require an account and do not collect personal information beyond standard web traffic and analytics.

Who we are

Project RISHI @ UC Berkeley is a registered student organization. You can reach us at sachitkumar2025@gmail.com.

What we collect

When you sign in with Google, we receive your name and email address from your Google account, which we use only to identify you as a club member. Only people on the club roster can access the Dashboard. As you use the Dashboard, we store the information you and other members create:

  • Tasks and events — titles, descriptions, dates, tags, who assigned them and to whom, completion status, and the activity history of each item.
  • Task submissions and comments — any note or link you submit to complete a task, and comments you leave on tasks.
  • Chat messages — the direct messages and group-chat messages you send through the Dashboard, along with any emoji reactions and the members included in each conversation.
  • Notifications — a record of the notifications shown to you in the Dashboard (which mirror the emails we send).
  • Profile photo — if you upload one for your member profile.
  • Newsletter email — if you subscribe through the signup on our site, we store the email address you provide.

Google Calendar access (optional)

Connecting your Google Calendar is optional and off by default. If you connect it, we request permission to manage calendar events so we can add your Dashboard tasks and events to your own Google Calendar. This is strictly one-way: we only create and update the events that originate from your Dashboard. We never read, view, or import your existing Google Calendar events, and your personal calendar is never shown to other members. You can disconnect at any time using the “Unsync” control, which stops syncing and removes the events we added, or by revoking access in your Google Account settings.

Gmail send access (optional)

So the Dashboard can send email on the club’s behalf, an authorized officer connects one or more Google accounts using send-only permission (the gmail.send scope). This access can only send messages — it can never read, view, or delete mail in the connected account. The club uses these connected accounts to send announcements and newsletters, and to send automated task, event, and reminder notifications. Members may also optionally connect their own Google account to send messages they author. The tokens that permit sending are stored securely on our server and are never exposed in the browser or shared with other members.

Background notifications (optional)

If you allow browser notifications, we store a push subscription for that browser or device so we can deliver Dashboard notifications even when the site isn’t open. You can turn this off at any time in your browser or device settings, which stops the notifications and lets us discard the subscription.

How information is stored

Dashboard data is stored in a secured Postgres database (Supabase) that is reachable only by our server using a private service key; row-level security prevents any public key from accessing it. Access tokens for Google Calendar and Gmail are stored server-side only and never touch your browser.

How we use and share it

We use your information only to operate the Dashboard for our club. We do not sell your information, and we do not use it for advertising. We share it only with the service providers that run our application (our hosting provider, Vercel, and our database provider, Supabase), and with Google when you choose to connect Google Calendar or when the club sends email through a connected Google account.

Google API disclosure

Project RISHI’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only request the Google Calendar and Gmail-send permissions described above, use them solely to provide those features, and do not transfer that data to others except as needed to provide the feature, for security, or to comply with law.

Data retention

We keep Dashboard data for as long as it’s needed to run the club. When you leave the club or ask us to, we remove your account information. Some content you created (such as tasks or messages shared with others) may remain visible to other members unless you ask us to remove it.

Your choices

  • Disconnect Google Calendar or a connected Gmail account at any time from Settings.
  • Turn off browser notifications in your browser or device settings.
  • Unsubscribe from the newsletter using the link in any newsletter email.
  • Request removal of your account data by contacting us at the email above.

Eligibility

The Dashboard is intended for members of Project RISHI @ UC Berkeley, who are university students and generally 18 or older. It is not directed to children.

Changes

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above.