Privacy Policy

1. Introduction

Welcome to Cazyweb. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website (regardless of where you visit it from) and tell you about your privacy rights and how the law protects you.

2. Information We Collect

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together follows:

• Identity Data: includes first name, last name, username or similar identifier.
• Contact Data: includes email address and telephone numbers.
• Technical Data: includes internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform.
• Usage Data: includes information about how you use our website, products and services.

3. How We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• To provide the services you have requested (e.g., project inquiries, course enrollment).
• To manage our relationship with you.
• To improve our website, products/services, marketing, and customer relationships.
• To send you our newsletter (if you have subscribed).

4. Google User Data

Some cazyweb apps (the cazyweb dashboard at dashboard.cazyweb.com, including its Calendar and Business Intelligence features) let you sign in with Google or connect a Google account. We only request access when you choose to connect, and we only request the access each feature needs.

What Google data we access

• Basic account info (openid, email): your Google account ID and email address, used to identify which Google account you connected.
• Google Calendar (calendar.readonly, calendar.events): your calendar list, and the start and end times of events so we can show your availability and avoid double bookings. When someone books a meeting with you through cazyweb, we create, update or cancel that event (with a Google Meet link) in the calendar you chose.
• Google Analytics 4 (analytics.readonly): read-only reporting data (sessions, conversions, revenue, traffic sources) for the GA4 properties you select.
• Google Ads (adwords): read-only campaign reporting data (spend, clicks, conversions) for the ad accounts you select. We do not create, edit or pause campaigns.

How we use it

Google user data is used only to provide the features you turned on: showing availability and managing bookings in your calendar, and building performance dashboards and reports for your own brand. We do not use Google user data for advertising, we do not sell it, and we do not use it to develop, improve or train generalized AI or machine learning models.

How we store and protect it

OAuth access and refresh tokens are encrypted at rest (AES-256-GCM) on our servers and are never sent back to your browser. Data is transmitted over HTTPS. Access is limited to the account that connected it and, for brand dashboards, to the members of that brand. Only authorised cazyweb staff can access it, and only when needed to provide support, for security, or to comply with the law.

Sharing

We do not share Google user data with third parties, except with service providers that host and run our platform on our behalf, when you explicitly ask us to (for example, sharing a dashboard link you create), or when required by law.

Retention and deletion

We keep Google data only while your connection is active. You can disconnect a Google account at any time from the dashboard settings, which immediately deletes the stored tokens so we can no longer access your Google account. Previously synced reporting data is deleted on request or when your brand is removed. You can also revoke access at any time from your Google Account atmyaccount.google.com/permissions. To request deletion of all your data, email[email protected] and we will delete it within 30 days.

Limited Use

cazyweb's use and transfer of information received from Google APIs to any other app will adhere to theGoogle API Services User Data Policy, including the Limited Use requirements.

5. Third-Party Services

We use trusted service providers to run our services: Razorpay and Stripe for payments, Google Calendar and Google Meet for scheduling, Resend for email, Slack for team communication, Cloudflare for hosting and storage, and Google Analytics and Microsoft Clarity for website analytics. Each provider only receives the data it needs to perform its service.

6. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know.

7. Your Rights

You can ask us to access, correct, export or delete your personal data, or withdraw consent at any time, by emailing [email protected].

8. Contact Us

If you have any questions about this Privacy Policy, please contact us via email at [email protected].