Privacy Policy

Welcome to Shouldrs! Your privacy matters to us. This Privacy Policy explains how Shouldrs, Inc. ("Shouldrs," "we," "our," or "us") collects, uses, stores, and protects your personal information when you visit our website at www.shouldrs.com or use our AI-powered products and services.

1. Information We Collect

We collect information to improve your experience and to provide our AI employee services effectively. The information we may collect includes:

Personal information you provide, such as your name, email address, phone number, and business details.
Business data you upload or connect to Shouldrs, such as HR documents, workflow information, or business system data.
Usage data, including pages visited, features used, and timestamps.
Technical data such as device type, browser version, operating system, and IP address.

2. How We Use Your Information

We use your information to:

Provide, maintain, and improve our AI employee services.
Authenticate your account and provide customer support.
Communicate with you about updates, support, and marketing.
Analyze and improve our products and technology.
Ensure the security and integrity of our systems.
Comply with legal obligations.

3. Use of Google Services & Google User Data

Shouldrs integrates with Google services to provide seamless authentication and business workflow automation. We may access:

Google Sign-In: For account authentication. We access your name, email address, and profile picture solely to provide authentication and service functionality.
Other Google Services: We will not access your Google Drive, Gmail, Calendar, or other Google account data unless you explicitly grant access for a specific feature. We only request the minimum permissions necessary to provide our services.

Limited Use Requirements: Shouldrs' use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

Prohibited Uses: We will NOT:

Transfer or sell Google user data to third parties, advertising platforms, data brokers, or information resellers.
Use Google user data for serving ads, including retargeting, personalized, or interest-based advertising.
Use Google user data to determine creditworthiness or for lending purposes.
Allow humans to read your Google user data unless you explicitly authorize access to specific items for customer support purposes.

If our access or use of Google user data changes, we will update this policy and request your new consent.

4. How We Share Information

We do not sell your information. We may share limited information with:

Service providers (e.g., cloud hosting, analytics, payment processors) that help us operate our services. Any third-party service providers with access to Google user data are contractually required to comply with Google API Services User Data Policy and handle data with the same level of security and privacy protection.
Google, as required for Google API functionality.
Legal authorities if required by law or to protect our rights.
Other parties only with your explicit consent.

5. Data Security

We implement technical and organizational measures to protect your data, including:

Encryption of data in transit (TLS/HTTPS) and at rest.
Role-based access control to restrict access to authorized personnel only.
Regular security monitoring, vulnerability testing, and incident response procedures.
Secure backups and recovery systems.

Human Access Restrictions: Our employees and contractors do not access your data, including Google user data, unless: (1) you explicitly authorize access to specific items for customer support purposes, (2) it is necessary to comply with legal obligations, or (3) it is required to prevent fraud or security incidents.

Security Incident Reporting: If we experience a security incident affecting your data, including Google user data, we will promptly notify affected users and Google as required by applicable law and Google's policies.

While we strive to protect your information, no system is completely secure. We encourage strong passwords and two-factor authentication where available.

6. Data Retention

We retain your data only as long as necessary for the purposes described in this policy or as required by law. Typical retention periods include:

Account and contact data: retained during your account's active period and up to two years after closure.
Usage and technical data: retained up to 24 months, then anonymized or deleted.
Uploaded business data: retained as long as your account remains active and for up to three years after termination.
Google user data: retained on the same schedule as other personal data unless required otherwise by law.

Upon your deletion request, we begin removing your data within 30 days and complete deletion within 90 days unless legal retention applies.

7. Your Choices and Rights

You can:

Access and update your account information.
Request deletion of your account and associated data.
Opt out of marketing emails at any time.
Revoke Google account access through your Google Account settings or your Shouldrs account settings.
Contact us for copies or corrections of your personal data.

Disconnecting Google Account: To disconnect your Google account and delete associated Google user data, you may: (1) revoke access through your Google Account settings, (2) use the disconnect feature in your Shouldrs account settings, or (3) contact us at privacy@shouldrs.com. Upon disconnection, we will delete your Google user data within 30 days unless longer retention is required by law.

8. User Consent and In-Product Disclosures

Before requesting access to your Google account data, we will:

Clearly explain what specific data we are requesting.
Explain why we need this data and how it will be used.
Provide a link to this Privacy Policy.
Request your explicit consent.

You may revoke our access to your Google data at any time through your Google Account settings or through your Shouldrs account settings.

9. Cookies and Tracking

We use cookies and similar technologies to understand usage and improve our services. You may disable cookies in your browser settings, but some features may not function properly. We may use Google Analytics or Tag Manager for performance analysis, but we do not share personal data with advertising networks.

10. Children's Privacy

Our services are intended for business use by adults and organizations. We do not knowingly collect data from individuals under 18. Our services are not directed at children under 13.

In compliance with the Children's Online Privacy Protection Act (COPPA), we do not:

Use Google Sign-In or other Google services for users under 13.
Knowingly collect personal information from children under 13.

If we become aware that we have collected data from a minor, we will delete it promptly and, if applicable, revoke any Google API access for that account.

11. Compliance and Hosting

This Privacy Policy is hosted at https://www.shouldrs.com/privacy and is prominently linked from our homepage at https://www.shouldrs.com.

We comply with:

Google API Services User Data Policy.
Google's Limited Use requirements for all Google user data.
Applicable privacy laws including GDPR, CCPA, and other jurisdictional requirements.
Children's Online Privacy Protection Act (COPPA).

12. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. If we make material changes, we will post an updated version at https://www.shouldrs.com/privacy.

If we make material changes that affect how we use Google user data, we will notify you via email and/or prominent notice in our application at least 30 days before the changes take effect, and we will request your renewed consent where required.

13. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

Shouldrs, Inc.
Email: privacy@shouldrs.com
Website: www.shouldrs.com