Workbeam Privacy Policy

This Privacy Policy explains how Workbeam("we," "us," or "our") accesses, uses, stores, and shares data when you use our website, applications, integrations, and related services (collectively, the "Services").

This page includes specific disclosures for data obtained through Google OAuth and Google APIs. It is intended to satisfy the Google API Services User Data Policy transparency requirements.

This policy applies to all users of Workbeam, including users who connect Google accounts through OAuth.

• It covers personal data collected directly from you and data received from connected services such as Google.
• It applies to production services published under the Workbeam brand.

When you choose to connect your Google account, Workbeam accesses and collects the following Google user data:

• Basic profile data (for example: name, email address, profile image, and account identifier)
• Google Calendar data, including calendar event metadata (for example: title, attendees, start and end times, location) and event content/description
• Gmail data, including message metadata (for example: sender, recipient, subject, and timestamp) and message body/content
• Google Meet metadata associated with meetings (for example: meeting link, participants, and time details)

We only request OAuth scopes that are required for features you enable in the product.

We use Google user data only to provide and improve user-facing features that are visible in Workbeam, such as account connection, calendar and email workflows, meeting-related insights, and related productivity automations you enable.

We do not use Google user data for unrelated purposes.

We do not sell Google user data. We disclose Google user data only in the following limited circumstances:

• To service providers/subprocessors that help us operate and secure the Services (for example, cloud hosting and infrastructure providers), under contractual confidentiality obligations
• To comply with applicable law, regulation, legal process, or enforceable governmental request
• To protect the rights, safety, and security of users,Workbeam, or the public
• As part of a merger, acquisition, or asset sale, subject to continuity of privacy and security commitments

Google user data is never sold and is not used for:

• Targeted, personalized, or interest-based advertising
• Transfer to data brokers or information resellers
• Credit-worthiness or lending decisions
• Training generalized AI/ML models not tied to your user-facing product experience

Workbeam's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We implement technical and organizational safeguards to protect Google user data, including:

• Encryption in transit using HTTPS/TLS
• Encryption at rest for stored data
• Encrypted storage for OAuth tokens

Access to production systems is limited to authorized personnel with a legitimate business need.

Sensitive Google user data, including Gmail message content and Google Calendar event details, is treated with heightened care. Access is restricted to authorized systems and personnel on a need-to-know basis. We do not log or expose sensitive data beyond what is required to deliver the feature you enabled.

We retain Google user data only as long as needed to provide the features you enabled, comply with legal obligations, and resolve security or abuse-related incidents.

You may request deletion of connected Google data by contacting [email protected] or by disconnecting your connected account where supported. We will process deletion requests in accordance with applicable law and operational retention requirements.

Depending on your location, you may have legal rights to request access, correction, export, or deletion of personal data. We will honor valid requests as required by applicable law.

You can revoke Google access at any time from your Google account permissions page and from connected account settings in Workbeam, where available.

We may update this policy from time to time to reflect legal requirements, product changes, and changes in our data practices. If we materially change how we use Google user data, we will update this policy before that new use begins.

For questions regarding this Policy, contact:

[email protected]