Privacy Policy

Amethyst Yield — Privacy Policy

Effective date: September 4, 2026 · Last updated: September 4, 2026

This Privacy Policy explains what information FairCorp (“FairCorp,” “we,” “us,” or “our”) collects through Amethyst Yield — the Windows desktop application and the optional FairCorp-hosted service that powers its live features (together, the “Service”) — and through the FairCorp ToolBox account used to download and sign in to it. It describes how we use, store, protect, and share that information, and the choices and rights you have. It also describes our practices for the Google user data Amethyst Yield accesses when you choose to connect your Google Calendar, which comply with the Google API Services User Data Policy, including its Limited Use requirements.

1. A note on our design

Amethyst Yield is offline-first. Most of your data — your notes, tasks, completions, study-timer sessions, and settings — is stored on your own device and never leaves it unless you sign in and use the live features you explicitly enable (such as cloud sync between your own devices). We do not sell your data, we do not show ads, and we do not build advertising profiles. We collect only what is needed to make the Service work for you, and we encrypt what we hold.

2. Information we collect

a. FairCorp ToolBox account information

• Email address and an optional display name that you provide when you create a FairCorp ToolBox account.
• A password hash (never your plaintext password) and an account role, plus standard account-activity metadata such as when the account was created. A secure session cookie is used to keep you signed in on the ToolBox website.

b. Amethyst Yield persona information (when signed in to live features)

• A persona identifier linked to your ToolBox account (including your account email as the stable identity) and the time it was created.
• An API key hash for service authentication. The plaintext key is shown to you once at creation and is never stored by us.
• An optional label you choose for your persona.

c. Canvas (learning-management system) information — only if you connect it

• A Canvas session cookie (or token) that you choose to enroll, stored encrypted in a per-persona vault, and used only to fetch your own coursework.
• Your course content as made available to you through Canvas — assignments, grades, announcements, exams, and calendar events — which we fetch, process, and return to your devices so the dashboard can display it.
• A short Canvas identity string used to confirm the enrollment.

d. Google Calendar information — only if you connect it

• OAuth access and refresh tokens granted by you through Google’s consent screen, stored encrypted in a per-persona vault. These tokens are never committed to source control and never transmitted outside our controlled infrastructure.
• The calendar event data we read through your authorization so it can appear in your Amethyst Yield dashboard (see “Google user data and Limited Use” below).
• The email address of the Google account you connected, so the Service can show you which account is connected.

e. Cloud sync data — only if you enable sync

• If you use the optional cross-device sync feature, the Service stores encrypted change records for your notes, tasks, and completions on FairCorp servers so your devices can stay in agreement. Each account’s sync data is stored in its own encrypted file.

f. Technical and operational information

• Standard server logs (such as IP address, timestamps, and endpoint) and error logs, used for security, abuse prevention, and keeping the Service running. We keep these for a limited time and do not use them to profile you.
• The app keeps crash logs locally on your device under %LOCALAPPDATA%\AmethystYield\logs. They are not uploaded unless you send them to us for support.

We do not collect precise geolocation, contacts, browsing history, keystrokes, or advertising identifiers, and the Service contains no third-party advertising or analytics SDKs.

3. How we use information

We use the information described above to:

• operate, maintain, and personalize the Service — for example, to fetch and display your Canvas coursework and Google Calendar events, and to sync your own data between your devices;
• authenticate you and keep your account and data secure;
• respond to your requests and provide support;
• monitor and improve the reliability, performance, and security of the Service; and
• comply with legal obligations and enforce our Terms of Service.

We do not use your information for advertising, and we do not use Google user data or your other connected-account data to train machine-learning or AI models.

4. Google user data and Limited Use

When you connect your Google Calendar, Amethyst Yield requests a single, read-only OAuth scope from Google:

https://www.googleapis.com/auth/calendar.events.readonly

This scope lets the Service view events on the calendars you can access so they can be shown in your Amethyst Yield dashboard. Amethyst Yield does not request the ability to create, edit, share, or delete calendar events.

FairCorp’s use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• Google user data is used only to provide or improve the user-facing calendar feature that is prominent in the Amethyst Yield interface;
• we do not transfer Google user data to third parties except (i) as needed to provide the feature to you through our own infrastructure, (ii) for security and abuse prevention, or (iii) to comply with applicable law;
• we do not use Google user data for advertising, and we do not sell it;
• we do not allow humans to read Google user data unless you ask us to (for support), it is needed for security, or we are required to do so by law, and in each case only to the minimum extent needed; and
• we keep Google user data only for as long as needed to provide the feature, and we delete it when you disconnect, when you ask us to delete it, or when your account is deleted.

You can revoke Amethyst Yield’s access to your Google data at any time on Google’s third-party access page (myaccount.google.com/permissions), and you can ask us to delete the stored tokens at any time (see Section 10). When you revoke or request deletion, Amethyst Yield will stop reading your calendar and we will delete the tokens we hold for you.

5. Cookies and similar technologies

The FairCorp ToolBox website uses a secure, HTTP-only session cookie to keep you signed in. We do not use advertising or cross-site tracking cookies, and we do not use third-party analytics. When you sign in to the Amethyst Yield app with your ToolBox credentials, your credentials are submitted directly to the ToolBox sign-in service over an encrypted (HTTPS) connection; Amethyst Yield’s own servers never receive your password.

6. How we share information

We do not sell or rent your personal information. We share it only in the following circumstances:

• The third-party services you connect. When you connect Canvas or Google, information flows to those services under your accounts and authorization, and their own privacy policies apply to how they handle your data. For Google, this is described in Section 4.
• Service providers. The FairCorp-hosted service runs on FairCorp’s own infrastructure. Where we use contractors or service providers to operate or support the Service, we require them to use your information only on our behalf and to protect it consistently with this policy.
• Legal and safety. We may disclose information where we believe in good faith it is required by law, legal process, or a governmental request, or where necessary to protect the rights, property, or safety of FairCorp, our users, or the public.
• Business transfers. In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction, subject to this policy and, where required by law, notice or consent.

7. How long we keep information

We keep your information only as long as needed for the purposes described in this policy — generally, for as long as your account is active or as long as a connected feature remains connected. When you delete your account, disconnect a service, or ask us to delete data, we delete or anonymize the related personal data (including encrypted Canvas cookies and Google tokens), except where we are required by law to retain limited records or need them to prevent fraud or abuse. Server and error logs are retained for a limited period consistent with their security purpose.

8. How we protect information

• In transit. Data moving between your device and the Service is encrypted with TLS.
• At rest. Canvas cookies, Google OAuth tokens, and sync records are encrypted at rest (Fernet-encrypted with keys held separately as secrets). On your Windows device, local keys are protected with Windows DPAPI.
• Access. Access to personal data is restricted to authorized FairCorp personnel and systems on a need-to-know basis, and credentials are injected as secrets rather than stored in code or configuration files.
• Storage location. The FairCorp-hosted Service and its data stores are located in the United States.

No method of transmission or storage is perfectly secure. While we work hard to protect your information, we cannot guarantee absolute security. If you believe your data has been compromised, contact us immediately at admin@fair-corp.com.

9. Your choices and controls

• Offline data. Your local notes, tasks, and settings stay on your device. Deleting the app removes them from your device.
• Canvas. You can disconnect Canvas in the app at any time. Disconnecting stops the Service from fetching your coursework and lets us delete your stored Canvas cookie.
• Google. You can disconnect your Google Calendar and revoke access as described in Section 4.
• Sync. You can disable cross-device sync at any time; your local data remains on your devices.
• Deleting your account and data. To delete your Amethyst Yield persona or your FairCorp ToolBox account, or to request deletion of specific data, email admin@fair-corp.com from the address on the account. We will process deletion requests within a reasonable time (typically within 30 days) unless the law requires us to retain the data. Where a self-service deletion feature becomes available in the Service, you may use it instead.
• Marketing. We do not send promotional email. If we ever do, we will include an opt-out, and account and service notices are not subject to opt-out.

10. Your rights under U.S. state privacy laws

Depending on where you live, U.S. state privacy laws (including the California Consumer Privacy Act as amended by the CPRA, the Colorado Privacy Act, and similar laws in Virginia, Connecticut, Utah, and other states) may give you rights regarding your personal information, including the right to:

• know what personal information we collect, use, and share (this policy describes it);
• access a copy of the personal information we hold about you;
• correct inaccurate personal information;
• delete personal information we hold about you;
• data portability — receive your personal information in a portable format where required; and
• opt out of “sales,” “sharing,” and targeted advertising. We do not sell or share your personal information and we do not engage in targeted advertising or profiling in furtherance of decisions that produce legal or similarly significant effects, so there is nothing to opt out of today. If that changes, we will update this policy and honor your choices.

To exercise any of these rights, email admin@fair-corp.com. To protect your account, we will take reasonable steps to verify your identity before acting (for example, by confirming you can receive email at the address on the account). We will not discriminate against you for exercising your privacy rights. Authorized agents may submit requests on your behalf where the law permits.

11. Children

Amethyst Yield is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you are under 13, do not use the Service or provide any information to us. If you believe a child under 13 has provided us personal information, contact us at admin@fair-corp.com and we will delete it promptly. If you use the Service as a student, note that data from your educational institution is subject to your institution’s own policies and applicable law (such as FERPA where it applies); Amethyst Yield accesses only the coursework and calendar data that you authorize through your own accounts.

12. International users

The Service is operated from the United States. If you access the Service from outside the United States, your information will be processed and stored in the United States, and you consent to that transfer. This policy is not intended to override any rights you have under the law of your country of residence. Note that when you connect your Google account, Google processes data in accordance with Google’s own privacy policies and terms.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” and “Effective date” dates at the top of this page. If we make material changes, we will take reasonable steps to notify you, such as a notice in the Service or by email to the address on your account. Your continued use of the Service after the changes take effect constitutes acceptance of the updated policy. If you do not agree, stop using the Service and request deletion of your data as described above.

14. Contact us

If you have questions or concerns about this Privacy Policy or our privacy practices — including about the data Amethyst Yield accesses through Google — contact FairCorp at admin@fair-corp.com or through the FairCorp ToolBox storefront at toolbox.fair-corp.com.