Privacy Policy

We collect information you provide directly, such as account details, tenant branding, customer records, proposal content, notes, attachments, integration settings, and any other information you choose to enter into the platform.

We also collect operational data such as authentication events, usage logs, page views, proposal lifecycle events, device/browser information, IP address, and diagnostic data used to secure and improve the service.

If you connect third-party services such as Google Workspace, QuickBooks, DocuSign, Trello, Twilio, or other integrations, we may receive tokens, profile information, and account metadata necessary to provide those integrations.

If a tenant administrator connects a Google Workspace account, WorkSysPro accesses only the Google user data needed to provide the user-facing Gmail and Google Calendar features described below. Connecting Google Workspace is optional and requires the Google account holder's consent.

• Google account identity: basic profile information, including name, email address, and profile image, is used to identify the connected Google account and display its connection status.
• Google Calendar list metadata: calendar identifiers, names, access roles, and selection status are read using the read-only calendar-list permission so the user can choose which calendars to use in WorkSysPro. WorkSysPro does not use this permission to change the user's calendar list or settings.
• Google Calendar events: event titles, descriptions, dates, times, locations, attendees, and related identifiers are read and synchronized for calendars selected by the user. WorkSysPro creates, updates, or deletes events only when an authorized user manages an appointment or project schedule in WorkSysPro.
• Gmail sending: WorkSysPro sends user-initiated customer, proposal, invitation, invoice, and workflow emails through the connected Google account. WorkSysPro does not read, search, modify, or delete Gmail messages or mailbox contents. Customer email replies are received through WorkSysPro's application-owned inbound reply service rather than by reading the connected Gmail mailbox.

The Google OAuth permissions requested for these features are basic identity permissions, https://www.googleapis.com/auth/calendar.calendarlist.readonly, https://www.googleapis.com/auth/calendar.events, and https://www.googleapis.com/auth/gmail.send. WorkSysPro does not request gmail.readonly or calendar.readonly.

WorkSysPro stores Google OAuth access and refresh tokens in encrypted form and stores only the calendar and event data needed to provide the connected features. Google user data is transmitted using encrypted HTTPS connections and is logically separated by tenant. Access is limited to authorized tenant users and service personnel who need it to operate or support the integration.

WorkSysPro does not sell Google user data, use it for advertising, disclose it to data brokers or information resellers, use it to determine creditworthiness, or use it to train generalized or non-personalized artificial intelligence or machine-learning models. Google user data is shared only with Google and service providers acting on our behalf when necessary to provide, secure, and maintain the requested WorkSysPro features, or when required by law.

WorkSysPro's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We use personal and business information to operate the platform, authenticate users, manage tenant access, deliver proposals, process customer interactions, support integrations, provide customer support, monitor performance, prevent abuse, and improve the product.

We may also use information to communicate service notices, security alerts, updates, billing or account information, and product-related support messages.

We do not sell personal information. We may share information with service providers, hosting providers, analytics tools, authentication providers, email providers, and other subprocessors that help us run WorkSysPro.

Information may also be shared when you intentionally enable an integration, send a proposal to a customer, invite another user, or otherwise direct us to transmit data on your behalf.

We may disclose information if required by law, to protect rights or safety, to enforce our agreements, or in connection with a merger, acquisition, financing, or sale of business assets.

The businesses using WorkSysPro control the customer, proposal, and operational data they store in their tenant workspace. Those businesses are responsible for their own notices, permissions, customer communications, and lawful use of the data they collect.

We process tenant data to provide the service and follow the tenant's instructions, subject to our legal obligations and service operations requirements.

We use cookies and similar technologies to maintain sessions, remember preferences, secure accounts, understand feature usage, and improve performance. We may use analytics tools, including Vercel Analytics and comparable services, to understand traffic and application performance.

We retain information for as long as reasonably necessary to provide the service, comply with legal obligations, resolve disputes, enforce our agreements, and maintain security and audit records. Retention periods may vary depending on the type of information and tenant account settings.

Google OAuth tokens and associated Google integration data are retained while the integration remains connected and as needed for security, backup, legal, and audit obligations. Disconnecting Google Workspace stops future API access. Users may also revoke WorkSysPro access through their Google Account permissions. Upon a valid deletion request or account termination, Google user data is deleted or de-identified unless continued retention is legally required.

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No system is completely secure, and we cannot guarantee absolute security of data transmitted to or stored in the service.

You may update account information, tenant content, and certain settings through the service. You may also contact us to request access, correction, or deletion of personal information, subject to applicable law and our operational requirements.

A tenant administrator may disconnect Google Workspace within WorkSysPro. A Google account holder may separately revoke WorkSysPro's access from the Google Account security and third-party connections settings. Privacy and deletion requests may be sent to the privacy contact listed below.

WorkSysPro is intended for business use and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

We may update this Privacy Policy from time to time. When we do, we will post the revised version here and update the effective date above. Continued use of the service after a revision becomes effective constitutes acceptance of the updated policy.

Privacy questions: privacy@worksyspro.com

Legal notices: legal@worksyspro.com

Support: support@worksyspro.com