Privacy Policy

Data we process

• Account data: your name, email, and organization details
• Customer data you store: the contacts, deals, messages, and files you manage in the platform
• Usage data: logs and metrics needed to operate and secure the service

How we use data

We use data solely to provide and improve the service: authenticating you, delivering features, processing payments through our payment partner, and keeping the platform secure and reliable. We do not sell your data.

Google user data

• Only when a staff member connects Google Calendar with their own Google account, we receive from Google: the Google account email address, and the time ranges in which their calendar has events (start and end times only). We do not receive event titles, descriptions, locations, or attendees.
• We use this information solely to prevent bookings from being placed while that person is busy. We do not use it for advertising, sale, AI training, or any other purpose.
• The credentials for the connection are stored on our servers only and are never returned to the browser. The busy time ranges are replaced with the latest ones on every sync.
• Choosing "Disconnect" revokes our access at Google and deletes the stored credentials and busy time ranges. You can also revoke access at any time from your Google Account settings.
• Kashiwade CRM's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements: https://developers.google.com/terms/api-services-user-data-policy

Tenant isolation

All customer data is logically isolated per organization. Every request is scoped to your organization, and access is enforced by role-based permissions and API-key scopes.

Your rights

You can export a contact's complete record at any time and exercise the right to erasure, which anonymizes personal data while preserving aggregate integrity. Account owners can request export or deletion of organization data by contacting support.

Subprocessors

We rely on a small set of infrastructure and payment providers to operate the service. Each is bound by data-protection terms, and personal data is shared only as needed to deliver the service.

Retention

We retain customer data for as long as your account is active. On erasure or account closure, personal data is removed or anonymized according to your request and applicable law.

Contact

For any privacy question or data request, reach us at privacy@kashiwade.com.