Privacy Policy

Techsolace is the data controller (data fiduciary) for personal data processed through Apptivly. For data your team adds to a workspace about its own clients and colleagues, your organisation is the controller and we act as its processor.

Contact: contact@techsolace.in.

• Account data: name, email address, hashed password, passkey and two-step verification credentials, profile photo and role.
• Workspace content: tasks, projects, documents, notes, chat messages, files, work sessions and attendance records you or your team add.
• Usage and device data: IP address, browser and device type, operating system, pages and features used, timestamps, and error and security logs.
• Cookies and similar technologies, described in our Cookie Policy.
• Support and inquiry data: what you send us through the contact form or by email.
• Payment data: if you buy a paid plan, billing details are handled by our payment processor. We do not store full card numbers.
• Integration data: limited data from services you connect, described in section 4.

We do not knowingly collect sensitive categories of data and ask that you do not upload them unless necessary for your work.

• To provide, operate, secure and support the service.
• To authenticate you and manage workspaces, teams and permissions.
• To send service messages such as sign-in codes, security alerts, reminders and billing notices.
• To respond to inquiries and support requests.
• To detect abuse, fraud and security incidents.
• To maintain and improve performance, reliability and features, using aggregated or de-identified data where possible.
• To comply with legal obligations.

We do not sell personal data, we do not share it for third-party advertising, and we do not use your workspace content or integration data to train generalised AI or machine-learning models.

Connecting an integration is optional and requires your explicit approval on the provider's own consent screen. We request only the permissions needed for the feature you turn on, and you can disconnect at any time.

Google (for example Google Calendar and Google sign-in): when you connect a Google account we access only the Google user data covered by the scopes you approve, such as your basic profile and calendar events, to show and manage them inside Apptivly. Apptivly's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide user-facing features visible in the app, we do not transfer it to others except as needed to provide those features, comply with law, or as part of a merger or sale with notice, we do not use it for advertising, and no human reads it unless you ask us to, it is needed for security or abuse investigation, or the law requires it.

Meta platforms (Facebook and Instagram): if you connect a Facebook or Instagram account we receive only the data the permissions you grant allow, such as your public profile identifier and the account details needed for the feature. We handle this platform data under the Meta Platform Terms and Developer Policies. We do not sell it, use it for advertising, or share it except with service providers that help us run the feature. You can remove Apptivly at any time in your Facebook or Instagram settings under Apps and Websites, which revokes our access, and you can ask us to delete the data we hold using our data deletion page.

GitHub: if you connect GitHub we receive the profile and repository information covered by the OAuth scopes you approve, such as your username, email and the repositories or activity you choose to link. You can revoke access in GitHub under Settings, Applications.

Claude and other AI connectors: when you connect an AI assistant to your workspace, it can act only within your own permissions, and it receives only the data needed to answer the requests you make.

Revoking access in the provider's settings stops further data collection. Data already stored in your workspace remains until you delete it or request deletion.

Where laws such as the GDPR or India's Digital Personal Data Protection Act apply, we process data to perform our contract with you, based on your consent (for example when you connect an integration), to meet legal obligations, and for our legitimate interests in running, securing and improving the service. You can withdraw consent at any time without affecting earlier processing.

We share personal data only in these cases:

• With other members of your workspace, according to the permissions your team sets.
• With service providers that process data for us under contract, such as cloud hosting, object storage, email delivery, authentication and payment processing providers.
• With integrations you connect, to the extent needed for the feature.
• To comply with law, a court order or a valid legal request, or to protect rights, safety and security.
• In a merger, acquisition or sale of assets, with notice to you.

We keep data for as long as your account is active and as needed to provide the service. When you delete your account, workspace or an integration, or ask us to, we delete or irreversibly anonymise the related personal data within 30 days. Encrypted backups are overwritten on a rolling schedule, normally within a further 35 days.

We may keep limited data longer where law requires it (for example billing and tax records), to resolve disputes, or to prevent fraud and abuse.

You can delete your data at any time. See our Data Deletion page at /data-deletion for step-by-step instructions, including how to delete your account, a workspace, or only the data received from Google, Facebook, Instagram or GitHub, and how to submit a deletion request without signing in.

We use encryption in transit, hashed credentials, role-based access control, optional two-step verification and passkeys, and monitoring. No system is perfectly secure. Please use a strong, unique password and tell us promptly at the address below if you suspect unauthorised access. If a breach affects your personal data we will notify you and the relevant authorities as required by law.

Depending on where you live, you may have the right to:

• access the personal data we hold about you and receive a copy;
• correct inaccurate or incomplete data;
• delete your data (see section 8);
• restrict or object to processing;
• data portability;
• withdraw consent;
• nominate someone to exercise your rights (India DPDP Act);
• opt out of the sale or sharing of personal data (California and similar laws). We do not sell or share personal data for advertising;
• lodge a complaint with your data protection authority.

To exercise a right, email contact@techsolace.in from your account address or use /data-deletion. We may need to verify your identity and will respond within 30 days, or sooner where the law requires. We will not discriminate against you for exercising your rights.

We use cookies and similar technologies as described in our Cookie Policy at /cookies.

Apptivly is intended for people aged 18 and over and is not directed to children. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us data, contact us and we will delete it.

Techsolace is based in India. Your data may be processed in India and in other countries where our providers operate. Where required, we use appropriate safeguards such as standard contractual clauses.

Grievance Officer, Techsolace, India. Email: contact@techsolace.in. We acknowledge complaints within 48 hours and aim to resolve them within 30 days. You can also use /contact.

We may update this policy. We will change the date at the top and, for material changes, notify you by email or in the app before they take effect.