Privacy Policy

Last updated September 26, 2026

Cassus Hub (cassushub.com) is a private project management workspace operated by Cassus Media ("we", "us"). It is used by our team and by the clients and partners we invite. It is not offered to the general public. This policy explains what information Cassus Hub handles, why, and the choices you have.

Information we collect

• Account details. Your name, email address, role, and sign-in security settings. Passwords are stored only as secure hashes, never in readable form.
• Work you add. Tasks, comments, documents, whiteboards, chat messages, files, time entries, goals and similar content you or your teammates create in the Hub.
• Activity and technical data. Sign-in times, an activity history of changes made in the Hub (who changed what, and when), and basic server logs used to keep the service secure and working.
• Cookies and browser storage. One essential cookie keeps you signed in. Your browser also stores display preferences (such as layout choices and the list of your mail folder names) so pages load faster. We do not use advertising or tracking cookies.

Connected email and calendar accounts

You can choose to connect a Microsoft 365 account, a Google account (Gmail and Google Calendar), or another mailbox (IMAP) so you can read and manage your own email and calendar inside the Hub.

• What we access. Only the account you connect, and only after you approve it on the provider's own sign-in screen. For Google, this is your Gmail messages and settings (to show, send, organize, filter and label your mail) and your Google Calendar (to show your events and create or change the ones you ask for).
• Live, not copied. Your email and calendar are read live from your provider each time you open them. The Hub does not keep a copy of your mailbox or calendar.
• What is saved, and only when you ask. If you turn an email or event into a task, the text and attachments you chose are saved to that task. Messages you schedule to send later are held until they are sent. Snoozed messages are remembered by reference so they can return at the right time.
• Sign-in keys. The access keys your provider gives us are stored encrypted on our server and are used only to act for you in the Hub.
• Only you. Your connected mailbox and calendar are visible only to you. Other Hub users, including administrators, cannot open them.

How we use Google user data

Cassus Hub's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We use Gmail and Google Calendar data only to provide the features you use in the Hub: showing your mail and calendar, and carrying out the actions you take.
• We do not sell Google user data, use it for advertising, or use it to build profiles.
• We do not use Google user data to develop, improve or train generalized artificial intelligence or machine learning models.
• We transfer Google user data to others only when it is needed to provide a feature you asked for (see "AI assistant" below), to comply with the law, or as part of a merger or acquisition with notice to you.
• No person at Cassus Media reads your Google data unless you ask us to (for example, for support), it is needed for security or to investigate abuse, or the law requires it.

AI assistant

Cassus Hub includes an AI assistant called Gabriel. When you ask Gabriel something, your question and the Hub information needed to answer it (for example, the tasks involved) are sent to our AI provider, DeepSeek, to produce the answer. If you ask Gabriel to turn an email into a task, the text of that email is sent the same way to draft the task. This happens only when you ask, and only the information needed for that request is sent. Gabriel can only see what you yourself are allowed to see in the Hub.

Who we share information with

We do not sell personal information. We use a small number of service providers to run the Hub, and they handle data only on our behalf:

• DreamHost hosts the Hub's servers and database in the United States.
• Dropbox stores files uploaded to the Hub, in Cassus Media's business account.
• DeepSeek provides the AI assistant, as described above.
• Microsoft or Google, when you connect those accounts or when the Hub sends notification emails through a connected mailbox.

Inside the Hub, the work you add is visible to the people who have access to the same workspace, space or project. Guests only see the projects they have been invited to. Summaries of project work may also be added to Cassus Brain, Cassus Media's internal knowledge base, to keep a record of client work.

How long we keep information

• Work content is kept while it is useful to the project. Deleted tasks, lists and spaces go to a trash for 30 days and are then removed.
• When a person is removed from a workspace, they can be restored for 30 days; after that their sign-in is removed, though their name stays on past work for the record.
• When you disconnect an email or calendar account, its stored access keys are deleted right away.

Security

The Hub is served only over encrypted connections (HTTPS). Passwords are hashed, access keys and secrets are encrypted, two-factor sign-in is available, and every request is checked against your permissions on the server. No system is perfectly secure, but we work to protect your information and will let affected people know if a breach affects them.

Your choices and rights

• Disconnect any time. Remove a connected account in Settings > My email accounts. You can also revoke Cassus Hub's access to your Google account at myaccount.google.com/permissions, or to Microsoft at myapps.microsoft.com.
• See, fix or delete your information. Email us and we will help you access, correct, export or delete your personal information, subject to any records we must keep.

Children

Cassus Hub is a business tool and is not meant for anyone under 16. We do not knowingly collect information from children.

Changes to this policy

If we change this policy, we will update the date at the top. If the changes are significant, we will let users know in the Hub.

Contact

Questions or requests: pcassarly@cassusmedia.com, Cassus Media.