Privacy Policy

Information we collect

When you use Shelvestack, we collect:

• Account information — your name, email address, profile image, timezone, two-factor authentication status, and a Stripe customer identifier if you subscribe.
• Technical information — your IP address and browser user agent, recorded with your sign-in sessions for security.
• Content you create — to-dos and notes, lists/spaces, reminder times, and whether an item was created via the web app or via MCP.
• Contacts you add — the name, email address, and phone number of people you choose to send reminders to.
• Usage and delivery records — aggregate usage metrics and a log of reminder notifications (recipient, channel, and whether delivery succeeded).

How we use information

• To provide, operate, and maintain Shelvestack.
• To send account emails (verification, security) and to deliver the reminders you schedule.
• To process subscriptions and payments.
• To secure the service, including rate-limiting and abuse prevention.
• To understand product usage and improve the service.

AI assistants and MCP

Shelvestack can connect to an AI assistant through the Model Context Protocol (MCP) using an API key you generate. When you enable this, the AI assistant you connect can read and write your to-do data on your instruction. You control this connection and can revoke the API key at any time.

Reminders you send to others

When you schedule a reminder for a contact, we send an email to the address you provide. You are responsible for ensuring you have a proper basis to contact that person. We send these messages on your behalf to operate the feature you requested.

Service providers we share with

We share information with the following processors only as needed to run Shelvestack:

• Stripe — payment processing and subscriptions.
• Resend — delivery of account and reminder emails.
• Upstash — reminder scheduling (QStash) and rate-limiting (Redis).
• Neon — the PostgreSQL database that stores your data.
• Vercel — application hosting.
• Your chosen AI assistant / MCP client — only when you connect one.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

International transfers

We and our service providers are based in the United States. If you access Shelvestack from outside the United States, your information will be transferred to and processed in the United States.

Data retention

We keep your information for as long as your account is active. When you close your account, or on request, we delete or anonymize your personal information, except where we must retain it to comply with law or resolve disputes.

Your rights and choices

You may access, correct, export, or delete your personal information by contacting us at support@p4.gg. Depending on where you live, you may have additional rights:

• California (CCPA/CPRA) — the right to know, delete, and correct your information, and to not be discriminated against for exercising these rights. We do not sell your personal information.
• EU/UK/EEA (GDPR) — the rights of access, rectification, erasure, restriction, portability, and objection. We process your information to perform our contract with you, to comply with law, and for our legitimate interest in operating and securing the service.

Cookies

Shelvestack uses only the cookies required to sign you in and keep your session secure. We do not use third-party analytics or advertising trackers in the Shelvestack app.

The p4.gg website uses Vercel Analytics, a cookieless, privacy-friendly analytics service, to measure aggregate site traffic.

Children’s privacy

Shelvestack is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, provide additional notice.

Contact

P4 Group, LLC — support@p4.gg.