1. Introduction

Welcome to BetterFlow ("the Tool"), developed by BetterQA. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you use our Tool. By using the Tool, you agree to the terms of this Privacy Policy.

2. Information we collect

• Personal Information: Includes your name, email address, username, and Google ID.
• Session Information: Tokens, session tokens, and other authentication data.
• Project and Timesheet Information: Details related to projects you are assigned to, timesheets, hours worked, and project-specific notes.

3. How We Use Your Information

• Authentication and Authorization: To provide secure login and manage user sessions.
• User Management: To create and manage user accounts and roles, including Super Admin, Admin, and User roles.
• Project and Timesheet Management: To manage projects, timesheets, and work status updates.
• Notifications: To send daily and weekly reminders for status updates and compliance checks.

4. Data Storage and Security

• Storage: All user data is stored securely in our databases. Session tokens are stored in secure cookies or local storage.
• Security Measures: We implement various security measures, including encryption, to protect your information from unauthorized access, alteration, disclosure, or destruction.
• Session Expiry: Tokens will expire after one week of inactivity to ensure security.

5. User Roles and Permissions

• Super Admin: Can assign rates per user per project, disable user subscriptions, and manage all aspects of the Tool.
• Admin: Can view all projects and users, create and manage user accounts and projects, and handle timesheets.
• User: Can access assigned projects and manage their timesheets.

6. Data Retention

• User Data: User data will be retained as long as the user has an active account. If a user no longer has a Google account or is deactivated, their session will be terminated, but their data will not be deleted.
• Timesheet Data: Timesheet data will be retained for project management and reporting purposes.

7. Third-Party Integrations

• Google Authentication: For secure user login.
• DeskTime: For daily time entries.

8. User Rights

• Access: You can request access to your personal data.
• Correction: You can request correction of inaccurate or incomplete data.
• Deletion: You can request deletion of your personal data under certain conditions.
• Objection: You can object to the processing of your data in certain circumstances.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date at the top of this policy. Your continued use of the Tool after any changes indicates your acceptance of the new terms.

10. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at [email protected]