Privacy Policy

1. Information we collect

Account and contact information

We process names, email addresses, user roles, authentication information, and project-access assignments needed to provide and secure workspace accounts.

Project information

We process project names and details, rooms, tasks, meetings, notes, decisions, documents, design assets, inspiration images, comments, and related records that authorized users add to the workspace.

Technical and security information

Our hosting and security providers may process ordinary request, device, browser, diagnostic, and security logs needed to operate, protect, and troubleshoot the service.

2. Google user data

When an authorized Waterleaf team member connects Google, the workspace requests access to the account email address, Google Drive, and permission to send email through Gmail.

• Google account email: used to identify the connected Waterleaf account and display the active connection.
• Google Drive: used to create project folders and to create, upload, copy, retrieve, organize, export, and delete project documents, images, and design packets at the user's direction.
• Gmail send permission: used only to send Waterleaf project invitations, notifications, and document messages initiated through workspace features. The application does not request permission to read, search, download, or analyze the user's Gmail inbox.

The workspace stores an encrypted Google refresh token so authorized project features can continue working after the user leaves the application. It may also store Google file and folder identifiers, links, file names, MIME types, and related workspace metadata. Project files remain in the connected Google Drive account.

3. How we use information

• Provide, maintain, and secure the workspace.
• Organize Waterleaf projects and enable collaboration with invited project participants.
• Create and manage Google Drive project folders, documents, images, and design packets.
• Send account, project, meeting, task, and document notifications.
• Provide support, diagnose errors, prevent abuse, and preserve service reliability.
• Comply with legal obligations and enforce applicable agreements.

We do not sell personal information or Google user data. We do not use Google user data for advertising, profiling, credit decisions, or data-broker activities.

4. How information is shared

Project information is shared with Waterleaf personnel and the client or project participants authorized for that specific project, subject to the workspace's internal and client-viewable controls.

We use service providers for hosting, databases, authentication, storage, email delivery, error diagnosis, and related infrastructure. These providers process information only as necessary to deliver services to Waterleaf and are not authorized by Waterleaf to sell it or use it for their own advertising.

Information may also be disclosed when required by law, to protect users or the service, or in connection with a business reorganization subject to applicable legal protections.

5. Data retention and deletion

We retain account and project information while it is needed to provide the workspace, maintain project records, meet contractual or legal obligations, and resolve disputes. Retention may differ by project and file type. Google Drive files remain subject to the connected account owner's Drive retention and deletion choices.

A Google account holder may revoke Waterleaf's access at any time through the Google Account third-party connections page. Revocation stops future API access but does not automatically delete project records or files already stored in Google Drive. To request access, correction, export, or deletion of Waterleaf application data, contact us at the address below. We will verify the requester's identity and authority before acting.

6. Security

We use reasonable administrative, technical, and organizational safeguards, including access controls, encrypted connections, private project authorization, and encryption of stored Google refresh tokens. No system can guarantee absolute security.

7. Children's privacy

The workspace is a business project-management service and is not directed to children under 13. We do not knowingly invite children to create workspace accounts.

8. Changes to this policy

We may update this policy as the workspace or applicable requirements change. We will update the effective date and provide additional notice when a material change requires it.

9. Contact

For privacy questions or data requests, contact Waterleaf Interiors at monica.waterleafinteriors@gmail.com.