Privacy Policy

1. Introduction and Scope

IntegriTech LLC (“IntegriTech,” “we,” or “us”) is a Florida-based company that provides a customer relationship management (CRM) platform for loan applications. Our services are intended for use by individuals and partner institutions within the United States only. This Privacy Policy describes how we collect, use, share, and protect personal information of users of our platform. It applies to all users of IntegriTech’s services in the U.S., including individual loan applicants (using our services for free) and business partners such as banks and financial institutions (our paying customers).

We are committed to protecting your privacy and adhering to all applicable U.S. privacy laws and regulations. This includes compliance with state-specific privacy requirements (such as California and Florida laws) as applicable. You will find information about specific rights granted by these laws in relevant sections of this Policy. We do not offer our services to individuals outside the United States, and we do not knowingly collect personal information from anyone outside the U.S. or from children under 13 years of age. By using the IntegriTech platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our services.

2. Information We Collect

We collect several types of information from and about you to provide and improve our services. This includes:

• Personal Identifiers: such as your full name, email address, phone number, mailing address, and other contact details.
• Government Identification: national identification numbers or other government-issued ID information (for example, Social Security Number or similar identifiers). This is typically collected from loan applicants for identity verification and compliance purposes.
• Financial Information (Applicants Only): if you are applying for a loan through our platform, we collect financial details such as bank account numbers and routing numbers (e.g., for loan disbursement or payments).
• Loan Application Data: information related to your loan application, which may include your employment and income details, credit history information (if provided), requested loan amount, and any supporting documents you upload. Supporting documents might include pay stubs, tax documents, identification documents, or other materials needed to process your loan application.
• Device and Usage Information: technical information we collect when you interact with our platform. This can include your IP address, browser type, device type, operating system, unique device identifiers, and browsing actions on our site (such as pages visited, dates and times of access, and referring URLs). We also collect information through cookies and similar technologies (see Section 5 below).
• Google Workspace Access (If You Connect a Google Account): If you authorize IntegriTech to access your Google account, the connected features can display and perform the actions you request in Gmail, Google Calendar, Google Drive, Google Contacts, Google Tasks, Google Chat, and Google Meet.

Content retrieved live and not persisted in our database. Gmail message bodies and attachments, Google Drive files and listings, Google Calendar events, and Google Tasks are retrieved from Google on demand and are not written to our database. They may be held in a short-lived server-side cache to improve performance and are cleared when the cache expires or when you disconnect.

Google-sourced data persisted in our database. To deliver real-time Chat functionality, support fallback when Google services are unavailable, and resolve sender identity, IntegriTech persists the following in encrypted database storage:

• Google Chat messages received after you connect: message ID, space ID, thread ID, sender email, message text, and timestamps. Historical Chat messages from before connection are not persisted.
• Google Chat attachment metadata: filename, content type, media type flags, Drive file references, and sender identity. Attachment contents are not stored.
• Gmail message metadata (headers only, no message bodies): message ID, thread ID, sender and recipient addresses, subject, snippet, labels, received timestamp, and read status.
• Google contact records used by Chat identity resolution: Google user ID, display name, email, and photo URL, resolved via Google People, Directory, Contacts, message senders, or Gmail headers.
• OAuth credentials, push-notification bookkeeping, and sync cursors required to operate the integration.

Multi-tenant visibility. Persisted Chat message mirrors and contact records are keyed by your IntegriTech tenant workspace and may be visible to other authorized users within the same tenant, consistent with the shared-workspace nature of Google Chat spaces. You will be informed of this at the time you connect your Google account.

Account-linking information and access credentials are addressed separately in Sections 4 and 7.

We collect most of this information directly from you when you fill out forms or communicate with us. We may also generate certain data automatically (like device and usage information), and in some cases, we might receive additional data from third parties (for example, an identity verification service or credit bureau, as authorized by you and applicable law, to assist with your loan application).

3. How We Use Your Information

We use the personal information we collect for various legitimate business purposes, including:

• Account Creation and Management: To create your account, authenticate your identity when you log in, and manage the user relationship. For example, we use your contact information to register you as a user (whether as an applicant or a partner bank user) and to maintain your profile.
• Loan Processing and Review: To process loan applications and facilitate the review process by our partner banks. This includes using your information to verify your identity and eligibility, evaluate your application, underwrite loans, and communicate your information to the bank or financial institution that will review or fund your loan. We also use your data to generate application summaries or reports for review by lenders.
• Communications and Notifications: To communicate with you about your account or transactions. For instance, we may send you status updates on your loan application, important notices about your account activity, or responses to your support requests. We also send notifications to partner banks and other involved parties as needed to coordinate the loan process.
• Workspace Productivity Features: If you connect your Google account, we use the access you authorize to provide the connected Mail, Calendar, Drive, Contacts, Tasks, Chat, and Meet functionality described in Section 4. The Google-specific use and sharing restrictions in Section 4 take precedence over the general purposes listed in this Policy.
• Analytics and Platform Improvement: To analyze usage of our platform and improve performance. We monitor and analyze user interactions (such as page load times, feature usage, and error logs) to troubleshoot issues, optimize our services, and develop new features. This helps us ensure our CRM system is running smoothly and effectively for all users. We do not use Google Workspace user data for product analytics, product improvement, or AI/ML model training.
• Security and Fraud Prevention: To protect our platform and users. We use personal and device information to detect and prevent fraudulent activity, unauthorized access, hacking attempts, or other misuse. For example, IP addresses and other device data help us identify suspicious login attempts or multiple accounts that might indicate fraud.
• Legal and Regulatory Compliance: To comply with applicable laws, regulations, and legal obligations. As a platform facilitating financial services, we may use your information for purposes required under law, such as know-your-customer (KYC) identity verification, anti-fraud and anti-money laundering checks, responding to lawful requests by authorities, and maintaining records as required by financial regulations.

We will not use your personal information for purposes that are not compatible with those listed above without obtaining your consent. If we ever need to use your data for a new purpose, we will update this Privacy Policy and/or seek your permission as required by law.

4. Google Workspace Data and Limited Use

Connecting your Google account is optional. When you connect, IntegriTech provides the Google Workspace features you authorize within the CRM. You may disconnect the integration or revoke Google access at any time.

Some Google Workspace content is retrieved live from Google and not persisted (see Section 2). Some Google-sourced data is persisted in IntegriTech’s database to enable real-time Chat, fallback availability, and identity resolution. Both categories are subject in full to the Limited Use requirements in Section 4.2.

4.1 Information Accessed and User-Facing Features

The information accessed depends on the Google permissions you grant and the features you use. Access remains subject to your existing permissions within Google.

Gmail: The Mail feature lets you read and search messages, compose and send email, reply to messages, manage drafts, archive, label, star, mark messages unread, move messages to spam or Trash, and manage your primary Gmail sending signature. We access message content and attachments only to provide the connected features and perform the actions you request. Gmail message bodies and attachments are not persisted in our database. Gmail header metadata (sender, recipient, subject, snippet, labels, timestamps, read status) is persisted to drive real-time notifications and the message list view. The integration moves messages to Trash; it does not bypass Trash for immediate permanent deletion.

Google Calendar: The Calendar feature lets you view, create, edit, and delete events, manage guests and recurrence, respond to invitations, and work with calendars available to you, including shared calendars. Calendar-list information and preferences such as time zone and week start support the display. We do not create, rename, or delete calendars themselves or change calendar-sharing rules. Calendar events are retrieved live from Google and are not persisted in our database.

Google Drive: The Drive feature lets you browse and search accessible files and folders, upload files, create folders, star files, and move files to Trash. Drive file contents and listings are retrieved live from Google and are not persisted in our database. We do not process Google Drive data with AI/ML services. Any transfer of Google Drive data is subject to the restrictions in Section 4.2; connecting a service or consenting to sharing does not authorize a prohibited use.

Google Contacts and Tasks: Saved Google Contacts support recipient suggestions when you compose email or add people in Chat. The Tasks view displays tasks alongside your calendar. These features are read-only: IntegriTech does not create, edit, or delete your Google contacts, and does not create, edit, complete, or delete your Google tasks. Google Tasks are retrieved live and not persisted. Contact records used for Chat sender identity resolution (name, email, photo URL, Google user ID) are persisted as described in Section 2.

Google Chat and Meet: The Chat feature lets you view accessible spaces, direct messages, and threads; send and reply to messages; edit and delete your own messages; manage reactions; and use supported space and membership controls. The Meet feature creates a meeting link for sharing in Chat. The integration does not perform Workspace administrator operations or access conversations beyond your permissions. Chat messages received through webhooks after you connect, and Chat attachment metadata, are persisted in our database as described in Section 2 to support real-time delivery and fallback. Message bodies are stored as text; attachment contents are not stored.

4.1a Google Workspace Data Persisted by IntegriTech

The Google-sourced data categories identified in Section 2 as persisted (Chat messages received after connection, Chat attachment metadata, Gmail header metadata, Google contact records for Chat identity resolution, OAuth credentials, and sync bookkeeping) are stored in encrypted database storage.

This persisted data remains Google API data for purposes of this Policy and is subject in full to the Limited Use requirements in Section 4.2, including the AI/ML exclusion, prohibited-use list, permitted-transfer list, and human-access restrictions. Persistence does not expand permitted uses. Persisted Google data is not provided to AI/ML services, is not used for creditworthiness or lending decisions, is not sold or transferred to data brokers, and is not used for advertising.

4.2 Google User Data and Limited Use

IntegriTech’s use and transfer of information received from Google APIs, including raw, derived, aggregated, and anonymized data, will adhere to the Google API Services User Data Policy and the Google Workspace API User Data and Developer Policy, including the Limited Use requirements.

These requirements apply to Google API data and data derived from it regardless of where it is processed, whether it is stored in short-lived cache or persisted in our database, and regardless of whether it is copied, exported, transformed, or re-uploaded. Anonymization, aggregation, persistence, or a different upload route does not remove these restrictions.

• Permitted purposes: Google API data is used only to provide the appropriate, user-facing connected features that you authorize. We do not use Google Workspace user data for product analytics, product improvement, advertising, or AI/ML processing.
• AI/ML exclusion: Our Google Workspace features do not use AI or machine learning. Google API data, including raw, derived, aggregated, and anonymized data, is not provided to AI/ML services directly or indirectly. It is not used for inference, model training, fine-tuning, evaluation, or improvement of AI/ML models.
• Prohibited uses: Google API data must not be sold or transferred to data brokers or information resellers, used for advertising or retargeting, or used or transferred to determine creditworthiness or for lending purposes. The general loan-processing provisions elsewhere in this Policy do not authorize those uses of Google API data.
• Permitted transfers: Google API data may be transferred only as permitted by Google’s Limited Use requirements: to provide or improve an appropriate, prominently disclosed user-facing feature with the user’s consent; when necessary for security purposes; to comply with applicable law; or in connection with a merger, acquisition, or sale of assets after obtaining the user’s explicit prior consent. Our commitment not to use Google Workspace data for product improvement remains applicable.
• Human access: Our employees, contractors, and service providers acting on our behalf do not read Google API user data unless you have given documented, explicit permission to view specific data; access is necessary for security purposes; access is required by law; or the data, including derivatives, is aggregated and anonymized and used solely for internal operations in accordance with applicable privacy requirements. This exception does not authorize general research, external disclosure, or AI processing.
• Precedence: These Google-specific restrictions control over any broader data-use, sharing, analytics, retention, or business-transfer provisions in this Policy. Your consent or direction does not authorize a use prohibited by Google’s Limited Use requirements.

• Google API Services User Data Policy
• Google Workspace API User Data and Developer Policy

4.3 Disconnecting Google and Requesting Deletion

You may disconnect Google from the integration controls in IntegriTech, or remove IntegriTech’s access through your Google Account permissions settings at https://myaccount.google.com/permissions. Disconnecting ends the application’s authorized access through that connection. Revoking access is distinct from deleting information that may already have been retained.

When you disconnect your Google account, IntegriTech automatically revokes the OAuth token with Google, deletes your OAuth credentials from our database, and deletes your associated Google contact resolution records. Previously persisted Chat messages, Chat attachment metadata, and Gmail header metadata are retained for continuity of your tenant’s conversation history and will be deleted upon request.

To request deletion of any retained Google-sourced data — including Chat messages, Chat attachment metadata, Gmail header metadata, OAuth bookkeeping, or operational records — contact Support@integritech.ai with the subject “Google Data Request.” We will verify the request and act within the timeframes described in Section 9. Retention and deletion details are addressed further in Section 7.

4.4 AI/ML Services and Google Data Separation

Any AI/ML features available elsewhere in IntegriTech are separate from the Google Workspace integration. Google API data and data derived from it are excluded from those features and from all third-party AI/ML processing. This exclusion applies regardless of the provider’s plan, training policy, or processing route, and regardless of whether the Google data is held in cache or persisted in our database.

Information submitted independently to other features is governed by the applicable feature notices and this Policy’s use, sharing, retention, and security provisions. Information retrieved through Google APIs remains subject to Section 4.2, including after transformation, persistence, or re-upload.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience, perform essential functions, and gather analytics:

• Essential Cookies: session maintenance, login persistence, preference storage.
• Performance Cookies: site performance and stability monitoring.
• Analytics Cookies: anonymized/aggregated usage metrics.

You may control cookies through browser settings. We do not currently respond to “Do Not Track” signals. By continuing to use our website, you consent to the placement of cookies as described.

6. How We Share Your Information

We understand the importance of keeping your personal information private. We do not sell your personal data to third parties for their own marketing or commercial purposes. We only share your information in the following circumstances:

• With Partner Banks and Financial Institutions: If you are a loan applicant, we share your application information (including personal identifiers, loan details, and relevant documents) with the bank or lending partner that will review and potentially fund your loan. This sharing is necessary to provide our service, as the bank uses this information to evaluate and process your loan request. Partner banks are required to keep your information confidential and use it only for evaluating your application and related regulatory purposes. Once your data is transferred to a partner bank, that bank will handle your information according to their own privacy policies and applicable financial privacy laws. Google API data is not shared with partner banks for lending purposes.
• With Service Providers (Processors): We employ third-party service providers to support functions such as cloud hosting, data storage, identity verification, email/SMS delivery, analytics, and customer support. Providers receive only information necessary for their services and are subject to contractual confidentiality, security, and use restrictions. Any AI/ML services used by other features do not receive Google API data, including raw, derived, aggregated, or anonymized data, for any processing purpose. Transfers of Google API data to other service providers must satisfy Section 4.2.
• Within Your Tenant Workspace: Persisted Google Chat messages, Chat attachment metadata, and Google contact resolution records are keyed by IntegriTech tenant workspace and may be visible to other authorized users within the same tenant. This reflects the shared-workspace nature of Google Chat spaces. You will be notified of this at the time you connect your Google account.
• Legal Requirements and Protection: We may disclose your information if required to do so by law or legal process. For example, we might need to share personal data in response to a subpoena, court order, or government request. We may also share information when we believe it is necessary to investigate or enforce our Terms and Conditions or other agreements, to detect or prevent fraud or security issues, or to protect the rights, property, or safety of IntegriTech, our users, or the public. Any such disclosure will be done in compliance with applicable laws.
• Business Transfers: If IntegriTech is involved in a merger, acquisition, sale of assets, or other business transaction, your personal information may be transferred to the successor or new owner as part of that transaction. In such cases, we will ensure that the new owner is bound to protect your personal data in a manner consistent with this Privacy Policy. We will notify you (for example, via email or a prominent notice on our website) if a business transfer occurs and results in any material changes to how your data is handled. For Google API data, a transfer in a merger, acquisition, or sale of assets requires your explicit prior consent; notice alone is not sufficient.
• With Your Consent or Direction: We may share your personal information with third parties when you explicitly request or consent to such sharing. For instance, if you ask us to share your information with a co-applicant, a financial advisor, or another third party, we will do so with your authorization. Additionally, we might offer features that allow you to publish or share content (such as testimonials or reviews). We will only publish personal information in that context with your consent.
• Anonymized or Aggregated Data: We may share information that has been anonymized or aggregated (so it can no longer be associated with you personally) with partners, researchers, or the public for purposes such as industry analysis, research, or improving our services. For example, we might publish reports or statistics about how many loan applications were processed through our platform in a year, but these reports would not contain any personal details. Google Workspace user data, including anonymized or aggregated derivatives, is excluded from this provision.

Aside from the situations listed above, we do not disclose your personal information to third parties. In particular, we do not sell, rent, or give out your personal data to outside companies for their own marketing or advertising purposes.

7. Data Retention and Deletion

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law. How long we keep specific data depends on the type of information and the purposes for which we collected it:

• Active Account Duration: For as long as you maintain an active account with us, we will keep the information you have provided so that we can continue to offer our services to you. For example, we retain your account details and loan history so you can log in and view your records, and so that we can process any ongoing or future loan applications.
• Business and Legal Needs: Even after you close your account or finish using our services, we may retain certain data for a period of time. We do this to comply with various legal, accounting, and regulatory obligations. For example, financial regulations and lending laws might require us (or the partner bank using our platform) to keep records of loan applications and transactions for a certain minimum period (such as a few years) for auditing or reporting purposes. We also retain information as necessary to resolve disputes, enforce our agreements, or protect our legal interests. The duration of retention in such cases will depend on the specific legal requirement or statute of limitations in effect. Generally, personal information related to financial transactions may be retained for several years to meet regulatory standards.
• Google Workspace Content: IntegriTech does not store copies of Gmail message bodies, Gmail attachments, Drive files, Drive listings, Calendar events, or Google Tasks. These are retrieved from Google as needed to deliver connected features and may be briefly held in server-side cache.
  
  The following Google-sourced data is persisted in encrypted database storage and retained for the active duration of your Google account connection unless deletion is requested: Google Chat messages received after connection, Chat attachment metadata, Gmail header metadata (no bodies), Google contact records used for Chat identity resolution, OAuth credentials, push-notification bookkeeping, and sync cursors. Upon disconnection, OAuth credentials and your associated contact resolution records are deleted automatically; other persisted Google-sourced data is retained until you submit a deletion request as described below.
• Google Data Requests: You may request deletion of retained Google-sourced information by contacting Support@integritech.ai with the subject “Google Data Request.” We verify requests before acting and explain any applicable legal retention requirement. General backup, anonymization, or legal-retention provisions do not expand permitted uses of Google API data under Section 4.2.
• Deletion Requests: If you request deletion of your personal data, we will take reasonable steps to honor your request. You may do this by contacting us (see Section 11 below) with your deletion request. Upon receiving a verified request, we will delete or anonymize your information from our active systems, unless retaining it is permitted or required for legal reasons. Please note that we cannot delete information that we are legally required to keep. For instance, even if you request deletion, we might need to retain certain data to satisfy anti-fraud, compliance, or tax requirements. We will inform you if we are unable to delete certain data due to such requirements.
• Backup and Archival Copies: Even when we delete or anonymize data from our active databases, it might remain in backup archives for a period of time until those backups are overwritten or deleted in the normal course of our data management process. We maintain backups to ensure the integrity of our system and to protect against accidental loss. We secure any such archived data and will continue to protect it in accordance with this Privacy Policy until it is safely erased. Backups that contain persisted Google-sourced data remain subject to the restrictions in Section 4.2 for as long as such data is present in the archive, and are not accessed, transferred, or processed for any purpose outside those restrictions.

After the applicable retention period has ended and it is no longer necessary for us to keep your data, we will securely dispose of it or anonymize it so that it can no longer be associated with you.

8. Data Security

Protecting your personal information is a top priority for IntegriTech. We employ a variety of security measures to safeguard data against unauthorized access, alteration, disclosure, or destruction:

• Encryption: We use strong encryption to protect personal data during transmission and at rest. This means that when you provide information on our site, the data is encrypted (using protocols like HTTPS/TLS) as it travels over the internet. We also encrypt sensitive information stored in our databases or servers, so that it is unreadable to unauthorized parties even if our data storage were compromised. OAuth credentials and persisted Google-sourced data are encrypted at rest.
• Access Controls: We implement strict access controls to limit who within our organization can access personal data. Employee and contractor access to user data is based on role and business need (the principle of least privilege). Only authorized personnel who need to handle your data (for example, support staff or system administrators) are granted access, and they are bound by confidentiality obligations. Access to Google API data is further restricted as described in Section 4.2.
• Authentication and Account Security: We provide options for securing account access, including strong password requirements and support for two-factor or multi-factor authentication (2FA/MFA) for users, especially for administrative or highly sensitive accounts. These measures help prevent unauthorized access to your account. We also monitor account login attempts and will alert you of any suspicious activity related to your account.
• Network Security: Our servers are protected by firewalls and intrusion detection systems (IDS) that monitor and guard our network against potential intrusions or attacks. We regularly update our systems with security patches and employ anti-malware tools to protect against viruses or other harmful code. Our platform is also continuously monitored for unusual activity.
• Secure Software Practices: We follow industry best practices in secure software development to minimize vulnerabilities in our platform. Our platform undergoes regular security assessments, such as vulnerability scans and penetration testing, to identify and address potential risks. We also maintain up-to-date systems and promptly address any security issues that may arise.
• Data Handling and Monitoring: Sensitive documents and files you upload (such as identification scans or financial documents) are stored securely and with restricted access. We keep detailed audit logs of when sensitive documents are accessed or downloaded by authorized users (for instance, when a bank officer views your loan documents) to maintain accountability. We utilize secure document handling procedures, ensuring that files are encrypted and only accessible to those with proper permissions.
• Backup and Recovery: We perform regular data backups and store them securely to prevent data loss. In case of a system failure or emergency, we have disaster recovery plans to restore information and resume services as quickly as possible. Backup data is encrypted and protected similarly to our live systems.
• Training and Awareness: Our personnel are trained on data privacy and security best practices. We maintain internal policies and conduct ongoing training to ensure that employees understand the importance of safeguarding personal information and know how to handle data securely. We also require any third-party service providers assisting us to implement robust security measures.

9. Your Privacy Rights

Depending on where you live and applicable law, you have certain rights regarding your personal information. We are committed to honoring these rights and giving you control over your data. These rights may include:

• Right to Access: You have the right to request a copy of the personal information we hold about you and to receive an explanation of how we use it. This is sometimes called the “right to know,” as it allows you to confirm what data of yours we have.
• Right to Correction: If any of your personal information is inaccurate or incomplete, you have the right to request that we correct or update it. We encourage you to keep your account information current, and you can also contact us to have us make corrections.
• Right to Deletion: You have the right to request that we delete your personal information, subject to certain exceptions. As noted in Data Retention and Deletion above, if you ask us to delete your data, we will do so unless we are required or permitted to retain it for legal, regulatory, or legitimate business purposes.
• Right to Data Portability: For information you have provided directly to us, you may have the right to obtain it in a portable and commonly used format. This means you can request a copy of your data in a format that can be transferred to another service provider.
• Right to Opt Out of Sale or Sharing: Applicable especially to California residents (under the CCPA/CPRA) and certain other state laws, you have the right to direct us not to sell your personal information. IntegriTech does not sell personal information to third parties. Likewise, we do not share your personal information with third parties for cross-context behavioral advertising (targeted advertising) purposes. Because we do not engage in these practices, we do not provide a “Do Not Sell or Share My Info” link at this time. If this policy changes in the future, we will update our practices and give you a chance to opt out.
• Right to Limit Use of Sensitive Information: In some jurisdictions, you can request that a business limit how it uses certain sensitive personal information. IntegriTech only uses sensitive data (like government IDs or bank account details) for necessary business purposes (such as verifying identity or processing a loan) and to comply with law. We do not use sensitive information for purposes like personalized advertising. If in the future we consider new uses of sensitive data, we will obtain any required consent or provide appropriate opt-out options.
• Right of Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights. This means that if you choose to exercise your rights (such as asking for your data to be deleted or opting out of any data sharing), we will not deny you our services, charge you different prices, or provide you a lower quality of service just because you exercised your rights.
• Google Account Disconnection: If you have connected a Google account, you may disconnect at any time via your IntegriTech settings or at myaccount.google.com/permissions. See Section 4.3 for details on what is deleted automatically and how to request deletion of retained Google-sourced data.
• Additional State-Specific Rights: Residents of certain states, such as California or Florida, may have additional privacy rights under state law. For example, California residents have specific rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), and Florida residents have rights under the Florida Digital Bill of Rights. These rights (including those listed above like access, correction, deletion, etc.) are generally provided to you by IntegriTech regardless of your state of residence, as we strive to uniformly protect your privacy. If any state law provides additional rights or imposes specific requirements, we will comply with those obligations as applicable.

Exercising Your Rights

You can exercise your rights by contacting us using the information in the Contact Us section below. Please specify which right you wish to exercise and provide us with enough information to verify your identity (for your protection, we will need to confirm that the request is coming from you or your authorized representative). For certain requests, we might ask for additional information to verify your identity or clarify the scope of your request. We will respond to your request within the timeframe required by applicable law (for example, within 45 days for most requests under California law, with the possibility of a lawful extension if needed). If we cannot fulfill your request for a specific reason (such as a legal exception), we will provide an explanation. If we deny your request, we will also inform you of how you may appeal our decision, as applicable under state laws. If you are a California resident and would like to designate an authorized agent to make a request on your behalf, you may do so. We will take steps to verify both your identity and your agent’s authority to act on your behalf, as required by California law.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes, we will revise the “Last updated” date at the top of this policy. If the changes are significant, we may also provide a more prominent notice (such as by posting a notice on our website or sending an email notification). We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our platform after any changes to this Privacy Policy constitutes your acceptance of the updated terms.

For Google API data, continued use of IntegriTech does not constitute consent to additional access or new uses. Before accessing or using Google data in a way not previously disclosed and authorized, we will explain the change and obtain the required user consent. All changes remain subject to the restrictions in Section 4.2.

11. Contact Us