At Deskwing, your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website app.deskwing.io and use our services. Please read this policy carefully to understand our views and practices regarding your personal data.

1. Information We Collect

1.1 Personal Information: We may collect personal information that you voluntarily provide to us, such as your name, email address, phone number, and payment information when you sign up for our services, make a purchase, or contact us.

1.2 Usage Data: We collect information about your interactions with our website, including IP address, browser type, operating system, and pages visited. This helps us improve our services and understand user behavior.

1.3 Cookies and Tracking Technologies: We use cookies and similar tracking technologies to enhance your experience on our site, analyze site usage, and provide personalized content.

2. How We Use Your Information

2.1 Service Provision: We use your personal information to provide and manage our services, process transactions, and communicate with you.

2.2 Marketing: With your consent, we may use your contact information to send you promotional materials, newsletters, and updates about our services. You can opt out of these communications at any time.

2.3 Analytics: We use data collected through cookies and tracking technologies to analyze usage patterns and improve our website and services.

3. Sharing Your Information

3.1 Third-Party Service Providers: We may share your information with third-party service providers who assist us in operating our website, processing payments, or performing other functions on our behalf. These providers are contractually obligated to protect your information and use it only for the purposes for which it was disclosed.

3.2 Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a subpoena or court order).

3.3 Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

4. Google Account Information

If you choose to link your Google account to Deskwing, we collect data from your Google account to manage the scheduling and editing of meetings directly on our platform. We do not sell or use this data for any purpose beyond the meeting management functionalities, nor do we store it long-term. This integration is solely for the convenience of managing your calendar.

4.1 Google Calendar Integration:
The Google Calendar integration allows us to access, manage, and update your calendar events directly through the Deskwing platform. We use this access solely for the purpose of helping you schedule and organize your meetings. We do not use or store your Google Calendar data for any other purposes.

• Sharing Your Information
  Ensure transparency around third-party access:

  4.2 Google OAuth Data Sharing:
  We do not share any data collected through Google OAuth with third parties, except as required by law or to provide services explicitly requested by you (e.g., managing calendar events). Google Calendar data is processed in accordance with Google's API Services User Data Policy.

• Your Google Data Rights
  Explicitly state users' rights regarding their Google data:

  If you choose to integrate your Google account with Deskwing (e.g., for managing calendar events), you may revoke Deskwing's access to your Google data at any time by visiting your Google Account Permissions page. Once access is revoked:

  • Termination of Data Access: Deskwing will no longer retrieve or process your Google data after the revocation of access. Any stored data will cease to be used for any operational purposes.

  • Retention of Stored Data: We may retain previously stored data to meet legal, regulatory, or operational obligations (e.g., for compliance or auditing purposes). You may request deletion of this data by contacting us at legal@deskwing.com, and we will comply with applicable data protection laws in processing your request.

  • Data Deletion Requests: You have the right to request the deletion of any personal data we hold about you, including data collected from Google services. Upon receiving your request, we will evaluate it under applicable legal requirements and delete the data unless we are obligated to retain it for legal or regulatory reasons.

  • 4.3 Revoking Google Access and Data Deletion:

    If you choose to integrate your Google account with Deskwing (e.g., for managing calendar events), you may revoke Deskwing's access to your Google data at any time by visiting your Google Account Permissions page. Once access is revoked:

    • Termination of Data Access: Deskwing will no longer retrieve or process your Google data after the revocation of access. Any stored data will cease to be used for any operational purposes.

    • Retention of Stored Data: We may retain previously stored data to meet legal, regulatory, or operational obligations (e.g., for compliance or auditing purposes). You may request deletion of this data by contacting us at legal@deskwing.com, and we will comply with applicable data protection laws in processing your request.

    • Data Deletion Requests: You have the right to request the deletion of any personal data we hold about you, including data collected from Google services. Upon receiving your request, we will evaluate it under applicable legal requirements and delete the data unless we are obligated to retain it for legal or regulatory reasons.

5. Data Security And Protection

We are committed to ensuring the protection of your personal data. The following data protection mechanisms are in place to safeguard your information, particularly sensitive data:

• Encryption: All sensitive information, including personal data and payment information, is encrypted both in transit and at rest using industry-standard encryption protocols (e.g., SSL/TLS) to prevent unauthorized access during transmission and storage.

• Secure Storage: Sensitive data is stored using secure, encrypted databases. Access to these databases is restricted to authorized personnel only, using advanced authentication mechanisms to prevent unauthorized access.

• Access Controls and Authentication: We enforce strict access controls to limit who within our organization can access your data. Only authorized staff with a valid need-to-know basis are granted access to sensitive information. Multi-factor authentication (MFA) and role-based access control (RBAC) are utilized to enhance security.

• Data Anonymization and Minimization: Where feasible, we anonymize or pseudonymize data to further enhance protection. We only collect and store the personal data that is absolutely necessary for the provision of our services, and we retain it only as long as needed for operational or legal purposes.

• Regular Security Audits and Vulnerability Management: We conduct regular security assessments, including vulnerability scanning and penetration testing, to identify and address potential security risks. Any identified vulnerabilities are prioritized and resolved promptly to maintain the integrity of our systems.

• Incident Response and Breach Notification: In the unlikely event of a data breach, we have a comprehensive incident response plan in place. We will notify affected individuals and relevant authorities in accordance with applicable data protection laws and regulations.

• Third-Party Security Measures: When sharing your data with third-party service providers (e.g., payment processors or cloud hosting services), we ensure that they also comply with industry-standard data protection and security protocols. These providers are contractually obligated to protect your information and are subject to regular security reviews.

Although we implement these robust security measures, no method of transmission over the internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

6. Your Rights

5.1 Access and Correction: You have the right to access, correct, or update your personal information held by us. You can do this by contacting us at legal@deskwing.com.

5.2 Opt-Out: You can opt out of receiving promotional communications from us by following the unsubscribe instructions provided in those communications.

5.3 Data Deletion: You may request the deletion of your personal information. We will process such requests in accordance with applicable laws and regulations.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically to stay informed about how we are protecting your information.

8. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: legal@deskwing.com