Privacy Policy

Effective August 20, 2026

This policy explains what information HQ for Action ("HQ," "we," "us") accesses, how it is used, and how it is protected—with particular attention to data accessed through Google APIs. HQ for Action is operated by R.J. Nestor. You can reach us at hq@hqforaction.com.

What HQ for Action is

HQ for Action is a personal productivity system that runs on your own computer. Your notes, tasks, projects, and calendar information are stored as ordinary files in a folder on your device, and you operate HQ through your own AI assistant running locally. HQ is designed so that your information stays with you.

Google user data we access

When you choose to connect your calendar, HQ for Action requests access to your Google Calendar through Google's secure OAuth sign-in. Specifically, it uses the Google Calendar scope https://www.googleapis.com/auth/calendar, which allows HQ to:

• Read your calendars and their events, so your assistant can show your real schedule alongside your other work; and
• Create, update, and delete events—only when you ask it to—so you can manage your calendar by talking to HQ.

HQ accesses this data only after you explicitly grant permission, and only to provide the calendar features described above.

How your data is stored and handled

HQ for Action does not operate a server that receives, stores, or processes your calendar data. Everything happens on your own device:

• When you connect your calendar, the authorization Google issues (an access token and refresh token) is stored locally on your computer, readable only by your user account.
• Calendar events HQ reads are fetched directly from Google to your machine and kept in your local HQ files. They are not transmitted to us.
• We have no ability to see your calendar, your tokens, or your events. There is no HQ account and no HQ database of your information.

What we do not do

• We do not sell, rent, or trade your Google data.
• We do not use your Google data for advertising.
• We do not use your Google data to train artificial intelligence or machine learning models.
• We do not transfer your Google data to others except as needed to provide the feature at your direction, or as required by law.

Your controls

• You can revoke HQ for Action's access to your Google account at any time at myaccount.google.com/permissions. Revoking access stops all future calendar syncing.
• Because your data lives on your own machine, you can delete it yourself at any time by removing the stored authorization and your local HQ files.

This website

The site sets no analytics or advertising cookies and makes no requests to third parties. When you click a buy button, the site reads your IP address and, from your browser, your time zone, and uses the two of them only to decide which of the two checkout providers to send you to; your time zone is stored in one first-party cookie so you are not asked twice. Neither is logged, shared, or used for anything else. Payment itself happens at Stripe or Gumroad, each under its own privacy policy; no card details ever reach this site.

Data security

Connections to Google are made over encrypted channels (HTTPS/TLS). Your authorization tokens are stored with restricted permissions on your own device. Because HQ holds none of your data on our side, there is no central store of your information for anyone to breach.

Children

HQ for Action is intended for adults and is not directed to children under 13.

Changes to this policy

If we change how HQ for Action handles your information, we will update this page and revise the effective date above. Material changes affecting how Google user data is handled will be reflected here before they take effect.

Contact

Questions about this policy or your data? Email hq@hqforaction.com.