Privacy Policy

The information we process depends on the features you use and may include:

• Account and profile information, including your name, email address, profile image, language, verification state, preferences, and account timestamps.
• Authentication and security information, including protected password credentials, linked-account identifiers and tokens, passkey information, two-factor authentication information, session tokens, IP address, browser or device details, and sign-in history.
• Organization and collaboration information, including organization names and logos, memberships, roles, invitations, notification preferences, and other information you submit to the Service.
• Technical and operational information generated when you use the Service, such as requests, errors, security events, and diagnostic logs.
• If you use paid features, we may process subscription identifiers and status; payment card details are handled by Stripe rather than stored by SFMongols. If you use AI chat, your messages are sent to OpenAI to generate a response and are not stored in the SFMongols application database.

• Provide, maintain, and personalize the Service, including creating accounts, authenticating users, and supporting organizations.
• Send verification, sign-in, invitation, account, notification, support, and service-related messages.
• Protect accounts, prevent abuse, investigate incidents, enforce our rules, and maintain the reliability of the Service.
• Provide customer support and administer the Service. Authorized administrators may use support tools, including account impersonation, only when needed for support, security, or administration.
• Comply with applicable legal obligations and improve the Service based on operational information and user feedback.

If you choose Sign in with Google, SFMongols requests only the basic identity scopes needed for sign-in: your email address and profile information, which may include your name, profile image, and Google account identifier. We do not receive your Google password.

We use this Google data only to authenticate you, create or link your SFMongols account, show your basic profile in the Service, secure the sign-in process, and provide account support. We do not use Google user data for advertising.

Your Google account identifier, authorized scope, and authentication tokens may be stored with your SFMongols account for as long as needed to keep the connection working. We share this data only with infrastructure providers acting for us, when required by law, or when you direct us to do so. You can revoke access from your Google Account. Contact us if you need help removing stored connection data.

SFMongols's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

SFMongols uses essential cookies and browser storage to keep you signed in, protect authentication flows, remember your language, theme, navigation preferences, and last-used sign-in method, and operate the Service. The primary sign-in session can last up to 30 days unless you sign out or revoke it.

You can control cookies and local storage through your browser. Blocking essential storage may prevent sign-in or cause parts of the Service to stop working. We do not currently use advertising cookies or third-party analytics trackers.

We disclose information only as needed to operate the Service or for the purposes described in this policy:

• Service providers, including Google or GitHub when you choose their sign-in services, Resend for transactional email, Cloudflare R2 for uploaded images, and hosting and database infrastructure providers.
• Other members of an organization when collaboration features require it, such as displaying member names, profile images, roles, or invitations.
• Stripe for payment processing or OpenAI for AI chat if you choose to use those optional features. They receive only the information needed to complete the requested function and process it under their own terms and privacy policies.
• Authorities, advisers, or other parties when reasonably necessary to comply with law, protect rights and safety, investigate misuse, or manage a business reorganization.

We do not sell personal information or Google user data.

We use technical and organizational safeguards designed to protect personal information. No online service is completely secure, so we cannot guarantee absolute security. Keep your credentials confidential and contact us if you believe your account has been compromised.

We keep personal information while your account is active and as reasonably needed to provide the Service, protect it, resolve disputes, meet legal obligations, and maintain necessary business records. Retention varies by data type and by the providers involved.

You can delete your account from account settings. This removes core account records from the active application database and cancels active subscriptions associated with the account. Uploaded files, security logs, backups, and records held by service providers may remain until removed from those systems or for as long as retention is legally or operationally required. Contact us if you need help with a deletion request.

• Review or update your name, email address, language, profile image, and notification preferences in account settings.
• Review or revoke active sessions and passkeys, manage two-factor authentication, and view linked accounts in security settings.
• Revoke SFMongols access through your Google Account security settings. Contact us if you need help removing stored Google connection data.
• Delete your SFMongols account or contact us to ask about access, correction, deletion, or another privacy request. Rights may vary based on where you live.

We may update this policy as the Service changes. We will post the revised policy here, change the last-updated date, and provide additional notice when appropriate. We will update our disclosures before using Google user data for a materially different purpose.

For privacy questions or requests, contact SFMongols at hello@sfmongols.com.