Privacy Policy

1. Introduction

RoleSquare ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our SaaS application to extract and manage data from your Google Workspace environment.

2. Data We Collect

• Account Information: We collect your email address and authentication credentials securely via Supabase Auth when you sign up.
• Google Workspace Data: When you connect your Google Account via OAuth, we access data based on the explicit scopes you grant (e.g., read-only access to Gmail or Google Drive). We only fetch data that matches the specific ingestion rules you configure.
• Extracted Data: The structured datasets generated by our AI from your unstructured documents are stored in our secure PostgreSQL database.

3. How We Use Your Data

Your data is strictly used to provide the RoleSquare service. Specifically:

• To ingest and parse your selected emails and documents.
• To process unstructured text through large language models (LLMs) to extract structured fields.
• To provide you with a dashboard to view, query, and export your extracted datasets.

Zero-Training Policy for AI

We do not use your personal data, Google Workspace data, or extracted datasets to train, fine-tune, or improve our base AI models, nor do we allow third-party LLM providers (e.g., Google Gemini) to retain your data for model training purposes. Data sent to LLMs is used strictly for immediate inference.

4. Data Storage and Security

We employ enterprise-grade security measures to protect your data:

• OAuth Tokens: Encrypted at rest using strict key rotation policies.
• Database Security: All extracted data and metadata are stored in Supabase PostgreSQL databases with strict Row-Level Security (RLS) policies enforcing tenant isolation by Organization ID.
• Transit: All data in transit is encrypted using TLS 1.3.

5. Data Retention and Deletion

We retain your extracted datasets and audit logs as long as your account is active, or in accordance with your chosen subscription tier (e.g., 7-day, 90-day, or unlimited retention). You may delete datasets, disconnect your Google account, or delete your entire organization at any time, which will permanently remove the associated data from our active databases.

6. Contact Us

If you have questions or comments about this Privacy Policy, please contact us via the Contact page or email us at privacy@example.com.