Privacy Policy

Minimal Carbon CRM is a business operations platform used to manage CRM activities, clients, companies, orders, invoices, internal communication, and connected mailbox workflows.

1. Information We Collect

1.1 Information you provide directly

• Administrator account information such as name, email address, phone number, and login credentials.
• Business records entered into the platform, including client, company, order, invoice, and internal workflow data.
• Messages, notes, and files shared through internal communication or collaboration features.

1.2 Information obtained through Gmail integration

If you choose to connect a Google account, we access Gmail data only as needed to provide the mail features you request inside the application. Depending on the permissions granted, this may include:

• Mailbox identity information such as the connected Google email address.
• Email metadata such as sender, recipients, subject line, labels, thread identifiers, and timestamps.
• Email content, including plain-text and HTML message bodies.
• Attachment metadata and attachment content where required to support mailbox features.
• Draft, sent, trash, and mailbox state information needed to synchronize your mailbox in the CRM.

1.3 Technical and usage data

• IP address, browser information, device information, authentication events, and audit logs.
• System activity, mailbox sync status, error diagnostics, and security-related logs.

2. How We Use Information

We use personal and business information to:

• Provide, maintain, secure, and support the CRM platform.
• Authenticate administrators and enforce access permissions.
• Display, organize, search, synchronize, draft, send, and manage email inside the product.
• Support operational features such as CRM records, orders, invoices, chat, notifications, and audit logging.
• Detect misuse, investigate incidents, troubleshoot technical issues, and protect the platform.
• Comply with legal obligations and enforce our contractual rights.

3. Google User Data and Gmail API Data

Gmail data is processed only to provide the Gmail-related features that the user has explicitly enabled, such as viewing email inside the CRM, syncing mailbox state, saving drafts, and sending messages.

• We do not sell Gmail data.
• We do not use Gmail data for advertising.
• We do not use Gmail data to train generalized AI or machine learning models.
• We do not use Gmail data for any purpose unrelated to providing or securing the user-facing mail features.

4. Access to Connected Mailboxes

Connected Gmail accounts are intended to be accessible only within the authorized account context of the application. We use application-level access controls to limit mailbox visibility to authorized users. We may access data internally only when necessary for security, abuse prevention, legal compliance, or support requested by the customer.

5. Data Sharing

We may share data only in limited situations, such as:

• With service providers and infrastructure vendors who help us host, secure, maintain, and operate the platform.
• Within your organization and only to users authorized through the service's access controls.
• To comply with law, regulation, court order, or lawful government request.
• To protect rights, security, and integrity of the service, users, or the public.
• In connection with a merger, acquisition, financing, or asset transfer, subject to applicable safeguards.

6. Data Retention

We retain information for as long as needed to provide the service, maintain records, resolve disputes, enforce agreements, comply with legal obligations, and support legitimate business operations. Synced Gmail data may remain stored until the connected account is disconnected, the data is deleted, or retention is required for legal or security reasons.

7. Security

We use reasonable administrative, technical, and organizational safeguards to protect information, including access controls, authentication safeguards, token protection, audit logging, and least-privilege practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Choices and Rights

• You may disconnect a connected Gmail account from the application, if that feature is available to your role.
• You may revoke Google account access from your Google account permissions settings.
• You may request access, correction, or deletion of personal data where legally applicable.
• You may contact us to request account closure or data deletion support.

To request privacy assistance, contact omgemsindia@gmail.com.

9. International Data Transfers

Your information may be processed in countries other than your own. Where required, we will use appropriate safeguards for cross-border data transfers.

10. Children's Privacy

This service is intended for business and organizational use and is not directed to children. We do not knowingly collect personal information from children.

11. Changes to this Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised effective date.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at omgemsindia@gmail.com or visit https://minimalcarbon.in.