August 25, 2026
This Privacy Policy explains how dissip ("we", "us"), operated by Data4ward, collects, uses, and protects your information when you use our task and calendar management application. By using dissip you agree to the practices described here.
Account information: your email address and a hashed password, managed by dissip's own authentication system running on our infrastructure.
Content you create: tasks, projects, notes, journal entries, energy logs, and calendar events you add to dissip.
Integration data: when you connect a Google, Microsoft, or CalDAV calendar, we access calendar events and store OAuth tokens (encrypted at rest) needed to keep the connection working.
Usage and technical data: basic logs needed to operate the service securely (e.g., request metadata). We do not run third-party advertising trackers.
To provide, maintain, and improve dissip's features.
To sync and display your connected calendars.
To process optional AI features (Brain Dump) when you choose to use them.
To secure your account and prevent abuse.
AI features (optional): when you use Brain Dump, the text or audio you submit is sent to Anthropic (Claude) and, as a fallback, Google (Gemini) for processing. We do not send your data to these providers otherwise.
Calendar providers: Google Calendar and Microsoft Graph, when you connect them.
File storage: Cloudflare R2 for attachments you upload.
Email: Resend for transactional and notification emails.
We share data with these processors only as needed to provide the corresponding feature.
We use strictly necessary cookies for authentication (set by our auth provider) and browser local storage to remember your in-app preferences (such as view settings). We do not use advertising or cross-site tracking cookies.
Integration tokens are encrypted at rest (AES-256-GCM). Data is isolated per tenant at the database level (row-level security). We use industry-standard measures to protect your data, but no method of transmission or storage is completely secure.
We retain your data while your account is active. When you delete content or your account, the associated data is removed from our active systems; backups are rotated on a limited schedule.
Depending on your jurisdiction (including under the LGPD and GDPR), you may have the right to access, correct, export, or delete your personal data, and to withdraw consent for optional features. To exercise these rights, contact us at [email protected].
Some of our processors operate outside your country. Where we transfer data internationally, we rely on appropriate safeguards offered by those providers.
dissip is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their data.
We may update this policy from time to time. Material changes will be reflected by updating the date above.
Questions about this policy? Email us at [email protected].