This Privacy Policy explains how IT Ways ("Company", "we", "our", "us") operates ITWAYS CRM ("Application") and how we collect, use, and protect information when users connect their Google account to the Application.
ITWAYS CRM is a web-based customer relationship management (CRM) system.
2. Information We Collect
2.1 Google User Data
When a user connects their Google account using Google OAuth, the Application may access the following data only after explicit user consent:
Google Contacts (.../auth/contacts) (to create, update, or sync client leads and contacts)
Google Calendar (.../auth/calendar) (to create, update, or sync meetings, appointments, and follow-ups)
Google Drive (.../auth/drive.file) (to upload, download, or attach property files explicitly selected by the user)
Google Analytics (.../auth/analytics.readonly) (to fetch read-only website traffic, visitor metrics, and lead acquisition data for the user's marketing dashboard)
Google Business Profile (.../auth/business.manage) (to manage business profile listings, customer reviews, and local insights)
Access to Google data is granted only after the user completes the Google OAuth consent flow.
The Application may also store:
OAuth access and refresh tokens stored in encrypted form and used only to maintain authorized access requested by the user.
The user's Google account email address
Authorized scope information
2.2 Technical Information
For security and operational purposes, the Application may collect:
Authentication timestamps
Connection logs
Internal user or account identifiers
3. How We Use Information
We use the collected information only to:
Provide CRM features requested by the user
Synchronize contacts and calendar events with Google services
Upload, attach, or retrieve files selected by the user
Render website performance and visitor analytics from Google Analytics in the CRM dashboard
Manage business profile listings and customer reviews
Maintain secure authentication and session continuity
Diagnose and resolve technical issues
4. Data Storage and Security
All authentication tokens are securely stored using encryption
Access is restricted to authorized application components
All data transmission occurs over HTTPS
We do not sell, rent, or share Google user data with third parties
Google data is accessed only when the user performs an action inside the Application and is not processed in the background without user interaction.
5. Data Retention
We retain Google authentication data until:
The user disconnects their Google account from the Application
Access is revoked from the user's Google Account settings
A deletion request is submitted by the user
6. User Rights and Control
Users may:
Disconnect Google access at any time
Revoke permissions from their Google Account settings
Request deletion of stored authentication data
7. Google API Limited Use Disclosure
ITWAYS CRM's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, Google user data is:
Used solely to provide user-facing CRM features (Calendar scheduling, Contacts sync, Drive attachments, GA4 traffic dashboard, and Business Profile management).
Never transferred or sold to third parties, data brokers, or advertising networks.
Never used to serve advertisements, including personalized, retargeted, or interest-based ads.
Never used to train generalized artificial intelligence or machine learning models.
8. Cookies and Session Data
We use minimal session cookies only to:
Maintain secure login sessions
Protect against CSRF attacks
We do not use tracking or advertising cookies.
9. Children's Privacy
The Application is not intended for users under the age required by applicable local laws, and we do not knowingly collect data from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised "Last Updated" date.