Privacy Policy

Authorised users may connect a Google Account to supported Fidus360 features, including QuoteFlow. When you do, Google shows you an OAuth consent screen listing the permissions being requested. Fidus360 receives only the permissions you approve on that screen, and Fidus360 never receives or stores your Google Account password. Connecting a Google Account is always optional and is initiated by you or your workspace administrator.

Depending on the permissions granted and the feature being used, Fidus360 or QuoteFlow may access:

• your Google Account name;
• your email address;
• basic profile information;
• Gmail message metadata;
• sender and recipient information;
• email subject;
• email date;
• Gmail message ID;
• Gmail thread ID;
• Gmail labels;
• relevant email message content;
• attachments linked to business inquiries;
• drafts prepared through Fidus360 for your review;
• permission to send emails that you initiate or authorise from your connected mailbox.

Fidus360 requests only the minimum Google permissions required for the functionality you select — for example, send-only access where a feature only needs to send mail on your behalf, and read access only where a feature needs to import incoming business correspondence. Fidus360 does not request or access Google Drive, Google Calendar, Google Contacts, or other Google services.

Google data may be used to:

• sign users into Fidus360, where Google sign-in is enabled;
• connect an authorised Gmail account;
• identify and import relevant business inquiries;
• organise emails into inquiry and communication records;
• extract relevant business information from email messages and attachments;
• display connected email data inside the authorised company workspace;
• prepare draft messages for your review;
• send replies, reminders, quotations, purchase orders, or other communications that you initiate or authorise;
• maintain inquiry-related communication history;
• diagnose integration errors;
• prevent abuse and protect platform security.

OAuth access tokens and refresh tokens may be stored so the authorised connection can be maintained without asking you to re-authorise on every use. Imported Gmail data may be stored as part of your business records where that is needed to provide the functionality you requested. Stored data may include message identifiers, sender and recipient details, subjects, message content, information extracted from attachments, and the resulting inquiry records.

Protection measures include:

• access restricted through company workspace permissions, role-based access controls, and tenant isolation between workspaces;
• encryption of data in transit over HTTPS;
• encryption at rest of stored OAuth refresh and access tokens;
• logging and monitoring to detect misuse of connected accounts.

Fidus360 does not store Google Account passwords. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Where required to provide a feature you have requested, selected email content or attachment content may be processed by automated or AI-assisted systems — for example to extract inquiry details, identify products or brands, structure business information, or prepare a draft response. This processing happens only to produce the user-facing result you asked for.

This may involve an approved third-party AI service provider. Such providers may process only the selected data needed to deliver the requested functionality, and only subject to applicable contractual and security controls.

Fidus360 does not sell Google user data. Google data may be shared only where necessary with service providers such as:

• cloud hosting providers;
• database providers;
• secure file-storage providers;
• email infrastructure providers;
• security and monitoring providers;
• automated document or data-processing providers.

Service providers may process this data only to provide services to Fidus360 and are not authorised by Fidus360 to use it for advertising, data brokerage, credit scoring, or general-purpose AI model training.

We may also disclose information where legally required, or where necessary to investigate fraud, abuse, or a security incident.

Fidus360 personnel do not manually access Gmail message content except where:

• the user or customer has authorised access for support or troubleshooting;
• access is necessary to investigate fraud, abuse, or a security incident;
• access is legally required; or
• the information has been aggregated or anonymised for permitted operational analysis.

Google user data is retained only for as long as necessary to provide the connected functionality, maintain the business records you asked us to keep, comply with legal obligations, resolve disputes, and protect platform security.

Disconnecting Google stops future access through that connection. Business records that were previously imported may remain in your company workspace until they are deleted by an authorised user or through a verified deletion request.

You can request deletion of Google-derived data using the deletion options available in your account or by emailing support@fidustech.co.in with the subject “Google Data Deletion Request”. Once verified, the applicable data will be deleted or anonymised within a reasonable period, except where retention is required by law, security requirements, accounting requirements, or legitimate customer business-record obligations. Copies may persist in routine encrypted backups until those backups expire on their normal cycle.

You may revoke Fidus360’s access to your Google Account by:

• disconnecting the Google Account from the relevant Fidus360 application settings, where that option is available; or
• removing Fidus360 from the connected third-party applications section of your Google Account at myaccount.google.com/permissions.

Revoking access stops future data access, but does not by itself remove business records that were previously imported into your workspace. To have those removed as well, use the deletion request process described above.