1. Overview & Scope
Welcome to 180workspace ("we," "us," or "our"). 180workspace operates the unified Work Graph business operating platform accessible via 180workspace.com, app.180workspace.com, desktop applications, mobile applications, and developer APIs (collectively, the "Service").
This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information and company data when you visit our marketing website, create an account, or utilize any of our 15 unified applications (including CRM, Projects, Finance, HR, Communications, Traffic Director, and Orbit Copilot).
2. Information We Collect
We collect information in three primary categories to provide reliable, enterprise-grade business tooling:
AInformation You Provide Directly
- Account Registration: Name, work email address, company name, phone number, and password credentials.
- Workspace Business Data: Customer profiles, Kanban project tasks, financial invoices, timesheets, payroll entries, internal chat messages, and document assets created inside your isolated workspace.
- Billing & Payment Information: Payment card details, billing address, and VAT/tax identifiers (processed securely via Stripe; we do not store full credit card numbers on our servers).
BInformation Collected Automatically
- Usage Analytics: App telemetry, feature utilization frequency, navigation paths, and error crash logs.
- Device & Network Data: IP addresses, browser user-agent strings, operating system, localized language preferences, and referral sources.
- Edge & Traffic Director Telemetry: Anonymized request fingerprints for bot mitigation and edge traffic routing.
3. Google API & OAuth User Data Policy
180workspace allows users to sign up and authenticate using Google OAuth single sign-on (SSO), as well as connect Google Calendar or Gmail for optional workspace sync features.
Google API Limited Use Disclosure
180workspace's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically:
- We only request the minimum Google scopes required (e.g.,
openid,profile,emailfor authentication). - We do not transfer your Google user data to external advertising platforms, data brokers, or information resellers.
- Humans do not read your Google user data unless you have given explicit permission for tech support, it is necessary for security investigations, or it is required by law.
- We do not use data obtained through Google Workspace APIs to develop, train, or improve generalized AI/ML models.
4. How We Use Your Information
We process your data strictly for legitimate business and operational purposes:
- Platform Delivery: Provisioning unified accounts, database schemas, and multi-tenant access controls.
- Automation & Orchestration: Executing background BullMQ queue triggers and Work Graph event listeners.
- Customer Support: Responding to help tickets, bug reports, and SLA inquiries.
- Billing & Compliance: Processing invoices, subscription renewals, tax calculations, and fraud detection.
5. Information Sharing & Sub-Processors
We only share your information with trusted third-party sub-processors strictly required to operate our global infrastructure:
| Sub-Processor | Service Provided | Data Location |
|---|---|---|
| Stripe, Inc. | Payment processing & subscription billing | United States / Global |
| Cloudflare, Inc. | Edge DNS, CDN, DDoS protection & bot shield | Global Edge Network |
| Amazon Web Services (AWS) | Cloud compute, PostgreSQL databases & backups | US-East / EU-Central |
| Google Cloud Platform | OAuth 2.0 authentication & SSO infrastructure | Global |
6. Data Retention & Deletion
We retain your company's Work Graph data for as long as your workspace account remains active. Upon subscription cancellation or explicit account termination:
- You can request a complete JSON/CSV export of all CRM, Project, and Financial records within 30 days of cancellation.
- After 30 days, tenant database records and uploaded media are permanently purged in accordance with our cascading data deletion protocol.
- Audit logs and billing tax records are retained only as required by statutory financial regulations.
7. Data Security & Multi-Tenant Isolation
180workspace implements bank-grade security protocols across every layer of the architecture:
All data in transit is encrypted using TLS 1.3; data at rest is secured via AES-256 hardware encryption.
Every database query is strictly filtered by companyId at the ORM middleware level, preventing data leakage.
Granular Role-Based Access Control and mandatory Multi-Factor Authentication for sensitive administrative actions.
8. Your Privacy Rights (GDPR, CCPA/CPRA)
Regardless of your geographic location, 180workspace provides full privacy rights to all users:
- Right to Access: You may request a copy of all personal data we maintain about you.
- Right to Rectification: You may update incomplete or inaccurate information directly in your workspace settings.
- Right to Erasure ("Right to be Forgotten"): You may request permanent deletion of your account and personal records.
- Right to Data Portability: You may export your workspace Work Graph in standardized machine-readable formats.
- Right to Non-Discrimination: We never deny service or degrade feature quality because you exercised your privacy rights.
To exercise any of these rights, email [email protected]. We respond to all verified requests within 30 days.
10. Children's Privacy
The Service is designed solely for commercial enterprise and professional business operations. We do not knowingly collect personal information from individuals under the age of 16.
11. Policy Changes & Notifications
We may update this Privacy Policy from time to time. When material modifications occur, we will notify registered workspace owners via email or an in-app notification banner at least 14 days before changes take effect.
12. Contact Privacy Officer
If you have any questions, concerns, or regulatory inquiries regarding this Privacy Policy, please contact our legal team:
180workspace Legal & Privacy Team
Email: [email protected]
General Legal: [email protected]
Website: https://180workspace.com