Privacy Policy

What we collect

• Account data: name, work email, job title, workspace name, role and password hash.
• Directory data you choose to sync: name, title, department, phone, office and photo of your staff.
• Signature content: templates, logos, images, links and disclaimer text you create or upload.
• Billing data: company billing email, plan, seats and Stripe customer identifiers. Card numbers are handled by Stripe and never reach our servers.
• Technical data: IP address, browser type, pages viewed and error diagnostics.

What we do not do

We do not read, store, scan or forward the body of your email. The service applies signatures; it is not a mail archive. We do not sell personal information, and we do not use your content to train AI models.

Why we hold it

• To provide, secure and support the service (contract performance).
• To bill you and prevent fraud (contract and legitimate interests).
• To improve reliability and diagnose faults (legitimate interests).
• To send service notices; marketing email only with consent and always with an unsubscribe link.

Who we share it with

Only the sub-processors needed to run the service — hosting and database, transactional email delivery and Stripe for payments — plus anyone you explicitly connect, such as Microsoft or Google. A current list is on the sub-processors page. We may also disclose information where law requires it.

Where it is stored and for how long

Data is hosted with our cloud provider in the region selected for your workspace. We keep account and content data for as long as your workspace is active, and delete it within 30 days of termination except where records must be kept for tax or legal reasons. Backups roll off on their normal cycle.

Your rights

Depending on where you live, you may request access, correction, deletion, restriction, portability, or object to certain processing. Contact privacy@myglobalsolutionsgroup.com and we will respond within 30 days. If your data sits inside a customer's workspace, we will refer your request to that customer as the controller.

If you are unhappy with our response you can complain to your local privacy regulator — in Australia, the Office of the Australian Information Commissioner.

Security

We use encryption in transit and at rest, role-based access control, least-privilege permissions to connected mail systems, and audit logging of administrative changes. No system is perfectly secure; we will notify affected customers and any required regulator of an eligible data breach without undue delay.