Privacy Policy

1. Information we collect

We collect the following categories of information:

• Account information — name, email address, workspace name, and password when you create an account.
• Business data you provide — branches, staff and team member details, services and pricing, sales and service logs, expenses, and payroll records you enter into your workspace.
• Billing information — handled by our payment processor. We do not store full card numbers.
• Usage data — pages viewed, features used, device and browser information, IP address, and diagnostic logs.
• Google Drive backup (optional) — if a workspace Owner connects Google Drive, the connected Google account email, the backup folder's ID, and an encrypted access token.

2. How we use your information

We use the information we collect to:

• Provide, operate, secure, and improve the Services;
• Calculate revenue, commissions, expenses, payroll, and profit for your workspace;
• Authenticate users and manage subscriptions and billing;
• Send you transactional emails such as team invitations and important service notifications;
• Respond to support requests and enforce our Terms;
• Comply with legal obligations and prevent abuse or fraud.

3. Legal bases (EU/UK users)

Where GDPR applies, we process personal data on the basis of contract performance, our legitimate interests in operating and improving the Services, your consent (where required), and compliance with legal obligations.

4. Sharing your information

We share information only with:

• Service providers (hosting, database, email delivery, analytics, payments) under contract;
• Google Drive, only when a workspace Owner turns on the optional backup, to save backup files in that Owner's own Google account;
• Authorities where required by law or to protect the rights, safety, or property of Commility, our users, or the public;
• An acquirer in the event of a merger, acquisition, or asset sale, subject to standard protections.

5. Optional Google Drive backup

Workspace Owners can choose to connect their own Google Drive so Commility saves a weekly backup copy of their sales records. This feature is off unless the Owner turns it on.When you connect, we ask Google for one Drive permission ("drive.file"), plus your Google account email address so we can show which account is connected. The drive.file permission only lets Commility see and create the files and folders Commility itself creates. We cannot see, open, change or delete any other file in your Google Drive.Commility creates a folder named "Commility Backups - [your business name]" in your Google Drive and, every 7 days, adds CSV files of the service sales, product sales and product sale corrections recorded since the previous backup, plus a short summary file. These files include customer names and contact details that you entered into Commility. The files are stored in your own Google account and are governed by your agreement with Google. Commility never changes or deletes files after creating them.We store an encrypted access token so the weekly backup can run, along with your Google account email and the backup folder's ID. We do not use Google data for advertising, do not sell it, and do not use it to train AI models.You can disconnect at any time in Settings > Workspace, or from your Google Account's security settings. Disconnecting revokes Commility's access and deletes the stored token; files already saved in your Drive stay there until you delete them.Commility's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Cookies and tracking

We use strictly-necessary cookies to keep you signed in and to secure the Services. We may use first-party analytics cookies to understand how features are used. You can control cookies in your browser settings.

7. Data retention

We retain account data for as long as your account is active and for a reasonable period afterwards to meet legal, tax, and audit obligations. You can delete workspace content or your account at any time from the app; residual backups are purged on a rolling schedule.

8. Security

We use industry-standard measures including encryption in transit (TLS), encryption at rest, role-based access controls, optional two-factor authentication, and row-level security that isolates every workspace's data in our database. No system is 100% secure — please use a strong, unique password.

9. International transfers

Commility may process data in countries other than your own. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete, port, or restrict processing of your personal data, and to object or withdraw consent. Contact us at info@veritiodigital.com to exercise these rights.

11. Children

The Services are not directed to children under 16. We do not knowingly collect data from children.

12. Changes to this policy

We may update this Policy from time to time. Material changes will be announced in-app or by email. Continued use of the Services after the effective date constitutes acceptance.

13. Contact

Questions? Email info@veritiodigital.com.