This Privacy Policy explains how ZConnect("ZConnect," "we," "us," or "our") collects, uses, stores, and shares information when you use our contractor goal-tracking and calendar web application (the "Service").
By using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.
1. Who this applies to
ZConnect is a workforce tool for contractors and administrators. Accounts are created by an administrator; there is no public self-registration. This policy applies to all users of the Service, including contractors and platform admins.
2. Information we collect
We may collect the following categories of information:
- Account information: full name, email address, password (stored as a secure hash), phone number, birthday, country, company affiliation, job role, industry, start date, profile image, and platform role (for example, user or admin).
- Work and progress data: team and personal goals, tasks, work logs, notes, onboarding video progress, achievements, and related timestamps.
- Calendar and meeting data: event titles, descriptions, times, attendees, meeting requests, decision responses, and Google Meet links created through the Service.
- Google Calendar connection data: whether your Google account is connected, OAuth refresh tokens needed to create calendar events on your behalf, and Google event identifiers for events we create.
- Technical and session data: authentication cookies (including a session token), short-lived OAuth state cookies, and preferences stored in your browser (such as a remembered email on the login form or display preferences).
- Communications: content of transactional emails we send (for example, password reset and meeting-related messages).
3. How we use information
We use information to:
- Provide, operate, and secure the Service (including authentication and access control)
- Display dashboards, goals, tasks, work records, and admin metrics
- Schedule meetings, send related emails, and create Google Calendar events / Meet links when you connect Google
- Deliver password-reset and other transactional messages
- Maintain and improve reliability, security, and support
We do not sell personal information. We do not use Google user data for advertising, credit scoring, or unrelated profiling.
4. Google Calendar / Google user data
ZConnect offers an optional Google Calendar connection from Settings. This is not used for Google Sign-In. When you choose to connect, we request the Google OAuth scope calendar.events.
What we access and do with Google data:
- We use your connected Google account only to create calendar events (and optional Google Meet links) that you or authorized flows initiate in ZConnect.
- We may include attendee email addresses that you or the Service provide for those events.
- We store a Google refresh token so the Service can create events on your behalf until you disconnect.
- We do not import, read, sync, or permanently store the contents of your existing Google calendars beyond what is needed to create and reference events originated from ZConnect.
Limited use:ZConnect's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide or improve user-facing features of the Service, is not sold, and is not used for serving advertisements.
Revoking access: You can disconnect Google Calendar at any time in Settings, which removes the stored refresh token from ZConnect. You can also revoke access in your Google Account permissions at myaccount.google.com/permissions.
5. How we share information
We may share information with:
- Other users in your organization, to the extent the product requires it (for example, team goal progress visible to authenticated users, or meeting attendees).
- Service providers that help us run the Service, such as hosting, database, file storage, and email delivery providers. These providers process data on our instructions.
- Google, when you connect Calendar, so events and Meet links can be created in your Google account.
- Legal and safety: if required by law, regulation, legal process, or to protect the rights, safety, or integrity of users or the Service.
Personal goals, personal tasks, and personal work records are treated as private to the account holder (and accessible to administrators as needed to operate the platform).
6. Cookies and local storage
- Session cookie: an httpOnly authentication cookie used to keep you signed in.
- OAuth state cookie: a short-lived httpOnly cookie used to protect the Google Calendar connection flow.
- Browser local storage: optional preferences such as a remembered login email or display settings.
We do not use third-party advertising cookies.
7. Data storage and processors
The Service is hosted on infrastructure that may include application hosting, managed PostgreSQL databases, and object storage for uploaded media and videos. Transactional email is sent through an SMTP provider configured for the Service. Data may be processed in the regions where those providers operate.
8. Data retention
We retain account and Service data while your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Administrators may delete accounts. When you disconnect Google Calendar, we delete the stored Google refresh token associated with your account. You may request deletion of your personal data by contacting us (subject to administrator and legal requirements).
9. Security
We use industry-standard measures appropriate to the nature of the Service, including hashed passwords, httpOnly session cookies, and access controls that limit who can create or view certain data. No method of transmission or storage is completely secure.
10. Children
The Service is intended for adult workforce use. It is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, contact us and we will take appropriate steps.
11. Your choices and rights
Depending on your location and role, you may be able to:
- Update certain profile information in Settings
- Disconnect Google Calendar
- Request access to, correction of, or deletion of personal data by contacting us
- Ask an administrator to update fields you cannot edit yourself
12. International users
If you access the Service from outside the country where our processors operate, your information may be transferred to and processed in other countries that may have different data-protection laws.
13. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date. Continued use of the Service after changes become effective constitutes acceptance of the updated policy.
14. Contact us
For privacy questions, Google data requests, or deletion requests, contact us at awinel.dev@gmail.com.