API Disclosure

 

BindHQ Google API Data Usage and Transfer Disclosure
BindHQ’s use of, and transfer of, information obtained via Google APIs will fully comply with the Google API Services User Data Policy and its Limited Use requirements. In particular, BindHQ commits to the following principles:

1. Transparency

We clearly inform users which Google account data we access (e.g. profile, calendar, drive) and why it’s needed. Our privacy settings and documentation explain how long we retain this data and how users can revoke access at any time.

2. Strictly Limited Use

Data obtained from Google APIs is used solely to enable or enhance BindHQ’s core user-facing features (e.g., calendar-based reminders, document import, single sign-on).

We do not use Google API data for any secondary purpose, such as analytics outside of feature improvement or product diagnostics.

3. Restriction on Data Transfer

We will not transfer Google API data to any third party, unless:

The user explicitly consents to that transfer (for example, when setting up an integration with a specific partner app).

It is necessary for security, fraud detection, or legal compliance.

It occurs in connection with a corporate transaction (e.g., merger or sale of the company), and the recipient agrees to uphold these same data-use restrictions.

4. Prohibition of Advertising Use

We will never use Google API–derived data for advertising or marketing purposes, including but not limited to retargeting, personalized ad delivery, or interest-based promotions.

5. No Unauthorized Human Access

BindHQ’s systems automatically process all Google API data.

No employee or contractor may view raw user data unless the user has given explicit consent, or it is strictly required for security investigations, legal requests, or to resolve a verified support case.

Any human access is logged, audited, and limited in scope.

6. Robust Security Practices

All Google API data is encrypted in transit (via TLS) and at rest (using AES-256 or better).

Access controls, intrusion detection, and regular security reviews ensure that data is protected against unauthorized access, modification, or disclosure.

7. Data Retention. Content retrieved from your Google account (such as email messages or attachments you connect to BindHQ) is stored only while your BindHQ workspace remains active.  When your organization’s contract with Owsy terminates, all customer data—including Google user data—is deleted within 30 days, unless a longer retention period is required by law or expressly agreed in writing.

You may also request early deletion of your Google user data at any time by emailing privacy@bindhq.com. We will honor verified requests within 30 days.

Your Privacy Choices & Rights Depending on your location, you may have rights to access, correct, delete, or restrict the processing of your personal information. To exercise these rights, please contact us at privacy@bindhq.com. California residents may also request information about categories of personal information we disclose for business purposes.

By adhering to these policies, BindHQ ensures that your Google account information is handled responsibly, securely, and only in ways that directly support the features and services you’ve chosen to enable.