At Business Pal, we are committed to protecting your privacy. This Privacy Policy explains how Twaambles Technologies ("we," "us," or "our") collects, uses, discloses, and protects information about you when you use our Business Pal online business tools and services (the "Service").
Business Pal is operated by Twaambles Technologies, located at 44 Mbizi Road Chilenje Lusaka.
1. Information We Collect
1.1. Information You Provide to Us
We collect information you directly provide to us, such as:
- Account Information: When you register for an account, we collect your name, email address, business name, and payment information (for premium modules).
- Business Data: Information you input into the Service, including but not limited to invoicing details, client information, product/service details, expenses, accounting records, HR data, inventory data, CRM notes, and law firm specific data.
- Communications: Records of your communications with us (e.g., customer support inquiries).
1.2. Information We Collect Automatically
When you use the Service, we may collect certain information automatically, such as:
- Usage data (e.g., features used, time spent on pages).
- Technical data (e.g., IP address, browser type, operating system, device identifiers).
- Cookies and similar technologies (for authentication, preferences, and analytics).
2. How We Use Your Information
We use the information we collect for the following purposes:
- To provide, maintain, and improve the Service.
- To process transactions and manage your account (including billing for premium modules).
- To personalize your experience and provide customer support.
- To send you administrative notifications, updates, and security alerts.
- To monitor and analyze usage and trends to improve the Service.
- To detect, prevent, and address technical issues or security incidents.
- To comply with legal obligations.
3. Google Drive Integration (Attachments Module)
Our Service offers optional integration with Google Drive through its "Attachments" feature in modules like HR and Law Firm Management. This section specifically addresses how we handle data related to this integration:
3.1. Google Account Data Access
When you choose to enable the Google Drive integration, you will be prompted to grant Business Pal permission to access specific data on your Google Drive account via Google's secure OAuth authentication process. We request the following Google API scopes:
- `drive.file`: This scope allows Business Pal to upload new files you initiate through our interface to your Google Drive and to manage (e.g., retrieve reference, delete reference, download) *only those files that were created or opened by Business Pal*. We do not access, view, or modify any other files in your Google Drive.
- `drive.appdata` (if applicable): If we store any application-specific configuration or metadata in your hidden Google Drive app data folder, this scope may be used. This data is not visible to you directly and is solely for Business Pal's internal functionality.
By authorizing this access, you consent to our access and use of data from your Google Drive solely for the purpose of providing the specified attachment functionality within Business Pal.
3.2. How We Use Google Drive Data
The data obtained from Google Drive (primarily file IDs and metadata for files you upload via Business Pal) is used exclusively to:
- Facilitate the upload of attachments from Business Pal to your Google Drive.
- Store references to these files in your Business Pal database to enable you to download or delete them directly from the Service.
- Ensure the seamless integration and functionality of the Attachments module.
Business Pal's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
This means:
- We will **only** use access to read, write, or modify content from Google Drive for the core functionality of the Attachments module as described (uploading, linking, and allowing download/deletion of files you specifically manage through Business Pal).
- We will **not** use data from Google Drive for advertising purposes.
- We will **not** transfer data from Google Drive to third parties for advertising or any other purpose unless necessary to provide the service (e.g., if you explicitly instruct us to share a file) or required by law.
- We will **not** allow humans to read data from Google Drive unless:
- We have your explicit consent for specific cases (e.g., for troubleshooting support where you request us to help with a file issue).
- It is necessary for security purposes (e.g., investigating abuse).
- It is necessary to comply with applicable law.
- The data (including derivations) is aggregated and anonymized and used for internal operations (e.g., to improve general features).
3.3. Data Storage (Google Drive)
When you use the Google Drive integration, the content of your files is stored directly on your Google Drive, not on Business Pal's servers. Business Pal only stores a reference (e.g., the Google Drive file ID, original file name, and relevant metadata) in its database to link the file to your Business Pal records and facilitate access.
3.4. Revoking Google Drive Access
You can revoke Business Pal's access to your Google Drive at any time by visiting your Google Account security settings: https://myaccount.google.com/permissions. Revoking access will prevent Business Pal from uploading new files or accessing previously linked files, but it will not delete the files already stored on your Google Drive.
4. How We Share Your Information
We do not share your personal information with third parties except in the following limited circumstances:
- With your consent: When you provide us with explicit permission to share your information.
- Service Providers: We may share information with third-party vendors, consultants, and other service providers who perform services on our behalf (e.g., payment processing, hosting, analytics). These providers are bound by confidentiality agreements and are prohibited from using your personal information for any purpose other than providing their services to us.
- Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency request).
- Business Transfers: In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.
- Protection of Business Pal and Others: We may disclose information when we believe it is necessary to protect the rights, property, or safety of Business Pal, our users, or the public.
5. Data Security
We implement reasonable security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. However, no internet transmission or electronic storage is 100% secure, and we cannot guarantee absolute security.
6. Your Choices & Rights
- Account Information: You can review and update your account information by logging into your Business Pal account.
- Data Access: You may request access to the personal data we hold about you.
- Data Deletion: You may request the deletion of your account and associated data, subject to our legal obligations.
- Google Drive Access: As detailed in Section 3.4, you can revoke Business Pal's access to your Google Drive at any time via your Google Account settings.
To exercise any of these rights, please contact us at twaambles@gmail.com.
7. Children's Privacy
Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information.
8. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of the Service after such modifications constitutes your acceptance of the new Privacy Policy.
9. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
Twaambles Technologies
44 Mbizi Road Chilenje Lusaka
Email: twaambles@gmail.com