Security and your data
What Pensova reads, what it keeps, what it never touches, and how to delete everything.
Updated 9 September 2026
The short version: Calendar permissions only, from Google or Microsoft; Pensova checks when you are busy each time it plans, and never copies your calendar events into its database; the card never touches Pensova at all. The full account, table by table, is on the Security and data page, which opens with the eight questions people ask before connecting a calendar, answered in plain words.
What is stored
- Your tasks, the time blocked for them, and drafts waiting for a decision.
- Working hours, the first day of the week, and which calendars count.
- The keys to your calendar, Google or Microsoft, so Pensova can keep your task blocks up to date between visits. No signed-in user can read them, including you.
- A short code made from when you are busy, so Pensova can tell whether your schedule changed. It cannot be turned back into events.
- A record of your plan from Stripe: which plan, its status, monthly or yearly, and the dates. Never the card.
- For notes by email: your private address and a log of what arrived (the service, a short code made from the text, and how many drafts), never the email.
Deleting the account
Email privacy@pensova.com from the address you signed up with. Deletion is permanent and covers everything above. It is done within 30 days, usually much sooner. Events on your calendar and Stripe’s own records of past payments are not Pensova’s to delete. A button in the app for this is in development.