Gridsoft Pty Ltd is firmly committed to protecting your privacy. We aim to maintain a safe and secure system of handling your personal individual information, whilst still providing access to your personal information when required. For this reason, we ensure that your personal information is handled in strict compliance with the Commonwealth Government’s National Privacy Principles. Further information on Australian Privacy laws is available from the Office of the Australian Information Commissioner. This policy sets out the principles we adopt in order to protect your personal information. These principles deal generally with our collection, use and disclosure of, and your access to information we may have recorded about you. Any amendments to this policy will be contained on our website.
Collection of your information
We only collect personal information that is necessary for us to carry on our business functions. The information we collect depends upon the nature of our dealings with you. We will normally collect directly from you any information we have about you.
Use and disclosure of your information
We will only use your personal information for the reasons we collected it. Unless we have first obtained your consent, these reasons and the parties to whom we might disclose it will be reasonably apparent to you when we collect your information and our use and disclosure of that information will only be for our business activities. If we have marketed our products and services to you and you no longer wish to receive those sorts of communications from us, you should contact us and we will ensure this is corrected. Any other use or disclosure we make of your personal information will only be as required by law or permitted by the Privacy Act 1988.
Data quality and security
We will take all reasonable steps to:
- make sure that the personal information we collect, use or disclose is accurate, complete and up to date;
- protect the information from misuse, loss or unauthorised access, modification or disclosure both physically and through computer security methods;
- destroy the information if it is no longer needed for any purpose.
Cookies
Cookies contain information that is transferred to your computer’s hard drive. They help us to deliver a better and more personalised service. You may refuse to accept cookies by activating the setting on your browser which allows you to refuse the setting of cookies or explicitly opting out. Unless you have adjusted your browser setting so that it will refuse cookies or choose to opt out, our system will issue cookies when you access our website. Please note that if you refuse to accept cookies, you may not be able to use all the features of this website to the fullest extent possible. We make use of the Google Analytics cookie. This tracks the pages that a user views anonymously and sends information to Google Analytics so that we can understand what information is useful to users. This cookie does not collect Personal Information. The operator of the Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. Further information and Google‘s applicable privacy regulations can be found at https://www.google.com/policies/privacy. We do not use cookies to provide marketing information to third parties.
Third-Party Account Integration (Google and Microsoft 365)
Our application allows users to connect their third-party accounts, including Google and Microsoft 365, to enable calendar-based functionality and account integration features.
Data We Access
Depending on the permissions granted by the user, we may access the following data from connected accounts:
Basic profile information (such as name, email address, and profile image)
Calendar data, including event start and end times, and availability status
Calendar metadata required to create or manage events on the user’s behalf
We only request the minimum level of access required to provide the intended functionality.
How We Use This Data
We use data obtained from Google and Microsoft 365 strictly to support application functionality, including:
Authenticating users and linking third-party accounts to user profiles
Checking calendar availability to prevent scheduling conflicts
Creating and managing calendar events on behalf of the user (where permitted)
Displaying relevant scheduling information within the application
We do not use this data for advertising, profiling, or unrelated purposes.
Data Sharing
We do not sell or rent Google or Microsoft user data.
We do not disclose such data to third parties except where necessary to operate our services (for example, to secure infrastructure and hosting providers acting on our behalf). These providers are contractually required to protect the data and are not permitted to use it for any other purpose.
Data Storage and Protection
We do not store calendar event data obtained from Google or Microsoft services. Calendar data is accessed transiently in real time solely to provide application functionality.
We implement appropriate technical and organisational measures to protect user data, including:
Encryption of data in transit using industry-standard protocols (TLS 1.2 or higher)
Secure storage of sensitive credentials and tokens
Access controls based on least-privilege principles
Monitoring and logging to detect and prevent unauthorised access
Data Retention
We retain third-party user data only for as long as necessary to provide the service:
Calendar data is not retained and is accessed only transiently when required
Profile information is retained while the user account is active
Access tokens are securely stored and may be revoked at any time
When a user disconnects their Google or Microsoft account, associated access tokens are revoked and related data is deleted or no longer accessible.
User Control and Data Deletion
Users can disconnect their Google or Microsoft account at any time through the application.
Once disconnected:
Access to the user’s Google or Microsoft account is immediately revoked
Any stored access tokens are securely deleted
No further data can be accessed from the connected account
As we do not store calendar event data from Google or Microsoft services, there is no persisted third-party data to delete.
Users may also request deletion of their account and associated personal information by contacting us using the details provided in this policy.
Compliance with Platform Policies
Our use of information received from Google APIs complies with the
Google API Services User Data Policy, including the Limited Use requirements, and the Google API Terms of Service.
Our use of information received from Microsoft APIs complies with the applicable Microsoft API Terms of Use.
We access, use, and handle third-party data solely to provide user-facing functionality. We do not use such data for advertising, profiling, analytics, or any unrelated purposes.
Use of external tools and links to other websites
The Gridsoft website may contain links to enable you to visit other websites of interest. However, once you have used these links to leave our site you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. We have integrated various tools and services on our website and applications from different companies into our website, which allow us to provide the rich functionality expected on our portal. The privacy policies for these tools and services are listed below, including, but not limited to:
- Google analytics: https://www.google.com/policies/privacy
- Google maps: https://www.google.com/policies/privacy
- Google places: https://www.google.com/intl/en/policies/terms
Access to and correction of your information
If you would like access to any records of personal information we have about you or if you believe any information we have about you requires correction, please contact us by phone on 1300556313 or in writing using our contact form.