4. Use of Your Personal Data

The Company may use Personal Data to:

• Provide and maintain the Service
• Manage Your Account
• Fulfill contracts and purchases
• Contact You via various communication channels
• Send promotional content unless opted out
• Manage Your support requests
• Conduct business transfers or evaluations
• Improve services through analytics

‍

Sharing Your Personal Data

We may share Your information:

• With Service Providers for analytics or communication
• During Business Transfers such as mergers or sales
• With Affiliates under this policy
• With Business Partners offering promotions or services
• With other users in public areas or on social media
• With Your consent for other purposes

5. Google Calendar Data

When you choose to connect your Google Calendar to Goodword, we may access following information:

• Calendar events (title, description, date, time, location)
• Calendar lists and settings
• Attendee information
• Event reminders and notifications

What Calendar Data We Access and Why

• Event information (e.g., titles, attendees, times, and descriptions) to help you manage your professional relationships, provide reminders, and suggest relevant follow-ups.
• Availability data (e.g., free/busy times) to assist with scheduling and coordination.

We access this information solely to provide the features you have opted into within Goodword.

How We Use Google Calendar Data:

• To sync your events and help you manage your schedule
• To provide reminders and notifications as configured by you
• To enable calendar-based functionality you have explicitly requested

We access this information solely to provide calendar-related features within Goodword

We DO NOT use Google Calendar data for:

• Targeted advertising
• Selling to data brokers or third parties
• Training Al models unrelated to your direct service
• Any purpose other than providing the Goodword service functionality

The Company may use Personal Data to:

• Provide and maintain our Service
• Notify you about changes to our Service
• Allow you to participate in interactive features
• Provide customer support
• Gather analysis to improve our Service
• Monitor Service usage
• Detect and prevent technical issues
• Provide news and offers with your consent

Data Security and Protection Mechanisms

‍We implement comprehensive security measures to protect your sensitive data, including:Technical Safeguards

• Encryption at Rest: All personal data stored in our databases is encrypted using industry-standard AES-256 encryption
• Encryption in Transit: All data transmitted between your device and our servers is protected using TLS 1.3 or higher protocols
• Secure Infrastructure: Our services are hosted on secure cloud infrastructure with SOC 2 Type II compliance
• Access Controls: Multi-factor authentication (MFA) is required for all administrative access to systems containing user data

‍Operational Safeguards‍

• Limited Access: Access to personal data is restricted to authorized personnel only on a need-to-know basis
• Employee Training: All employees undergo annual security and privacy training
• Background Checks: Personnel with access to sensitive data undergo background verification
• Audit Logging: All access to personal data is logged and regularly reviewed

‍Google User Data Specific Protections‍

• OAuth 2.0 Implementation: We use secure OAuth 2.0 flows for Google authentication
• Minimal Scope Access: We only request the minimum necessary Google permissions
• Token Security: OAuth tokens are encrypted and stored securely, with automatic rotation
• Isolated Storage: Google user data is logically separated from other data in our systems
• Regular Security Audits: We conduct quarterly security reviews of our Google integration

‍Incident Response‍

• 24-Hour Notification: In case of a data breach, affected users will be notified within 24 hours
• Incident Response Team: Dedicated team trained to handle security incidents
• Regular Backups: Daily encrypted backups with point-in-time recovery capabilities

‍Retention of Calendar Data

‍We only retain calendar information for as long as necessary to provide the Service. Some event details may be cached temporarily to improve performance. If you disconnect your Google Calendar, Goodword will no longer be able to access your calendar, and any associated data stored by Goodword will be removed in line with our general data retention practices.Retention Periods:

• Personal Data: We retain your personal information only for as long as necessary to provide you with our services and as described in this privacy policy
• Google Calendar Data: Calendar information is cached temporarily (maximum 7 days) to improve performance
• Usage Data: Retained for 90 days for analytics and security purposes
• Account Data: Retained for the duration of your account plus 30 days after deletion request

‍Sharing of Calendar Data

‍We do not sell or share your Google Calendar data with third parties for marketing or promotional purposes. Calendar data is only shared with trusted Service Providers (e.g., cloud hosting providers) to operate the Service, or when required by law.

‍User Control Over Calendar Permissions

‍You are always in control of your calendar connection. You may:

• Disconnect your Google Calendar at any time through your account settings in Goodword.
• Revoke Goodword’s access to your calendar directly through your Google Account Permissions.

Once disconnected or revoked, Goodword will no longer be able to access your calendar, and any stored data will be handled in accordance with this Privacy Policy.