Privacy Policy
Effective 21 September 2026. Last updated 21 September 2026 (two-way calendar sync).
1. Who this covers
The noir. Digital Office ("the Digital Office") is an internal work tool operated by noir., a youth creative empowerment organisation based in Accra, Ghana. It is used by noir. personnel to manage projects, tasks, meetings and team information.
It is not a public consumer service. Accounts are created by noir. administrators for people who work with noir.; there is no public sign-up, and the Digital Office is not offered to children or to the general public.
noir. is the data controller for the information described here. Questions, requests and complaints go to support@noirgh.com.
2. Information the Digital Office holds
Your account
- Name, work email address, job title, department and team membership
- A profile photo, if you upload one
- A password, stored only as a one-way hash, and never in readable form
- Passkey public keys, if you register a passkey (the private key never leaves your device)
- Sign-in and administrative activity, kept for security and accountability
Your work
- Projects, tasks, assignments, due dates, estimated hours and status changes
- Comments, notes, and files or links you attach
- Meetings and events you create or are invited to
- Announcements, and notifications generated from the above
Technical information
- Standard web server logs, including IP address and request time
- A session cookie, which exists only to keep you signed in
- A push-notification subscription, if you choose to enable notifications
The Digital Office does not use advertising or third-party analytics trackers, and it does not build behavioural profiles.
3. The Google Calendar connection
Connecting your Google Calendar is optional. Nothing about your Google account is accessed unless you personally choose to connect it, and you can disconnect at any time. If you never connect it, the whole of this section simply does not apply to you.
What we ask for, and why
| Permission requested | Why the Digital Office needs it |
|---|---|
https://www.googleapis.com/auth/calendar.events |
To keep your work calendar and your Google Calendar in step: to create and update Google Calendar events for noir. meetings, task due dates and project deadlines, and to read the events in that calendar so a change you make in Google Calendar is reflected back in the Digital Office. This permission covers reading all the events in the calendar you connect, not only the ones noir. created. |
https://www.googleapis.com/auth/userinfo.email |
To show you which Google account is connected, so you can tell at a glance that it is the right one. |
These are the only two permissions requested. The Digital Office does not ask for access to your Gmail, your Drive files, your contacts, or anything else in your Google account.
What is stored
- The email address of the connected Google account
- Google access and refresh tokens, encrypted at rest with AES-256-GCM. A refresh token is long-lived access to your calendar, so it is never stored in readable form.
- A sync cursor, and a mapping between each noir. meeting, task or project and the corresponding Google Calendar event, so the same event is updated rather than duplicated
- A copy of the events in the calendar you connect -- their title, date, time and location. This is described in full immediately below, because it is the part most worth understanding before you connect.
- The time of the last sync, and the last error if one occurred
Your own events are copied in, and only you can see them
Read this before you connect. The sync works in both directions and it does not try to sort your work events from your personal ones. If you connect your Google Calendar, every event in it is copied into the Digital Office, including events that have nothing to do with noir.
Those events are stored as personal calendar entries belonging to you. They are shown to you and to nobody else. Not to your team, not to your team lead, not to leadership, not to an administrator. There is no screen anywhere in the Digital Office that displays another person's personal entries, and the database table they live in is only ever read with your own user id attached.
What this means in practice: a medical appointment, a class, an interview, a family commitment in the calendar you connect will end up in noir.'s database, visible to you when you sign in. If you would rather that did not happen, do not connect that calendar. Connecting is entirely optional, nothing about your work in the Digital Office depends on it, and nobody will know whether you did.
If you want the convenience without sharing your personal life, a practical option is to create a second Google Calendar for work and connect that one instead.
Events you create in the Digital Office go the other way: noir. meetings, task due dates and project deadlines are written into the calendar you connected, and they carry a hidden marker so the sync can recognise its own events later. Personal entries you type into the Digital Office are written to your Google Calendar too, and deleting one in either place deletes it in both.
Nothing read from your calendar is used for advertising, sold, shared outside noir., or used to train artificial-intelligence models. See the Limited Use disclosure below.
This is a change. Until 21 September 2026 the Digital Office read only the events it had created itself and ignored everything else. It now reads everything, so that a change made in Google Calendar shows up at work and the other way round. The protection moved from "we don't look" to "only you can see it", and this policy was rewritten rather than left describing the old behaviour. If you connected your calendar before that date and are not happy with the new arrangement, disconnect: it deletes the stored tokens, and you can delete the imported entries.
Google API Services Limited Use disclosure
noir.'s use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
In plain terms: data obtained from Google is used only to provide and improve the calendar sync you asked for. It is never sold, never used for advertising, never transferred to anyone else except as required by law, and never used to train generalised artificial-intelligence or machine-learning models. No human reads your Google data except where you have given explicit permission for a specific support problem, where it is necessary for security purposes, or where the law requires it.
Disconnecting, and what happens to your data
You can disconnect at any time from the Digital Office, which revokes the token with Google and deletes the stored tokens and the event mapping. Personal entries already imported stay on your own calendar page until you delete them, which you can do one at a time from the calendar, or all at once by asking at support@noirgh.com. You can also revoke access directly at myaccount.google.com/permissions, which takes effect immediately regardless of anything on our side.
Disconnecting does not delete Google Calendar events that were already created, since they are yours and live in your calendar. You can delete them in Google Calendar as you would any other event.
4. Who the information is shared with
noir. does not sell personal information and does not share it for advertising. Information is disclosed only:
- Within noir. — colleagues see the work information they need: who a task is assigned to, meetings for their team, the staff directory. Leadership can see workload and performance summaries.
- To service providers who operate the app — Hostinger (hosting, database and outbound email), Google (the Calendar API, and Firebase Cloud Messaging if you enable push notifications on Android or Chrome), and Apple (push notifications on iOS). They process data on our instructions in order to run the service.
- Where the law requires it — in response to a valid legal obligation, or to protect the rights, safety or property of noir., its people or others.
5. Security
- All traffic is served over HTTPS
- Passwords are stored as one-way hashes; nobody at noir. can read them
- Google refresh tokens and access tokens are encrypted at rest (AES-256-GCM)
- Passkey sign-in is available, and the private key never leaves your device
- Configuration files holding credentials are blocked from being served over the web
- Access is limited to signed-in noir. personnel, with administrative actions restricted to leadership
No system is perfectly secure, and we would rather say so than imply otherwise. If you believe an account or the service has been compromised, tell us at support@noirgh.com.
6. How long information is kept
- Account and work records are kept while you work with noir., and for as long afterwards as noir. needs them for its records
- Google tokens and calendar mappings are deleted when you disconnect
- Server logs are retained for a short period by our hosting provider and then overwritten
- Push subscriptions are deleted when you turn notifications off, or when the browser or device reports them as expired
7. Your choices
- Calendar sync — connect or disconnect whenever you like; it is off until you turn it on
- Email alerts — switch off in the notification menu; you still see notifications inside the app
- Push notifications — controlled by your browser or device, and revocable there
- Your profile — correct your own details, or ask an administrator
- Access, correction and deletion — ask at support@noirgh.com for a copy of the information held about you, a correction, or deletion. Some records may need to be retained where noir. has a legal or legitimate business reason; if so, we will say which and why.
8. International transfers
noir. operates in Ghana. The servers and the service providers listed above may process information outside Ghana, including in Europe and the United States, which is an ordinary consequence of using hosted infrastructure.
9. Changes to this policy
If this policy changes, the date at the top changes with it. If a change materially affects how Google Calendar data or personal information is used, noir. will tell affected users rather than relying on them to notice.
10. Contact
noir.
Accra, Ghana
support@noirgh.com