Privacy Policy

1. Introduction

TenGate (“TenGate”, “Company”, “we”, “our”, or “us”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store, disclose, and protect information when you use:

• The TenGate website located at 10g8.com and related domains
• The TenGate Portal web application
• The TenGate Portal mobile application
• Any services, support systems, project management tools, communication channels, and software provided by TenGate

By accessing or using our services, you agree to this Privacy Policy.

2. Information We Collect

Information You Provide

We may collect:

• Name
• Email address
• Phone number
• Company name
• Billing information
• Account credentials
• Project requirements
• Uploaded files and attachments
• Support ticket information
• Communications with our team
• Task descriptions and project notes

Information Collected Automatically

We may automatically collect:

• IP address
• Browser type
• Device information
• Operating system
• Application version
• Usage activity
• Access times and dates
• Error logs
• Analytics information

Project and Collaboration Data

When using TenGate Portal, we may store:

• Tasks
• Comments
• Team assignments
• Notifications
• Support tickets
• Project files
• Project status information
• Time tracking information
• Internal project communications

3. How We Use Information

We use collected information to:

• Provide and maintain our services
• Create and manage user accounts
• Deliver software development and consulting services
• Manage projects and task assignments
• Process support requests
• Communicate service updates
• Improve platform functionality
• Monitor performance and security
• Detect fraud and abuse
• Comply with legal obligations
• Process payments and subscriptions

4. Google User Data (Google Calendar)

Connecting a Google Calendar to TenGate Portal is optional. TenGate Portal is fully usable without it, and you may disconnect at any time. This section describes how we access, use, share, protect, retain, and delete Google user data, and applies in addition to the rest of this Privacy Policy.

What Google user data we access

If you choose to connect your Google Calendar, we access data through the Google Calendar API using the following scopes, granted by you through Google’s OAuth consent screen:

• https://www.googleapis.com/auth/calendar.events — to view, create, update, and delete events on your calendar
• openid and https://www.googleapis.com/auth/userinfo.email — to identify which Google account you connected, so it can be displayed in your TenGate Portal settings

The Calendar data we access consists of event details such as titles, descriptions, start and end times, time zones, locations, attendee email addresses, free/busy status, and event identifiers. We do not access Gmail, Google Drive, Contacts, Google Calendar access control lists, your Google profile picture, or any other Google data.

How we use Google user data

We use your Google Calendar data solely to provide calendar features you have requested inside TenGate Portal, specifically to:

• create, update, and delete events on your calendar that correspond to meetings scheduled in TenGate Portal;
• read your calendar so that changes you make in Google are reflected in the portal;
• show when you are already busy, so meetings are not scheduled over existing commitments;
• display your calendar events within the TenGate Portal interface and associate them with your projects and tasks.

We use your email address only to identify the connected account. We do not use Google user data for advertising, marketing, or profiling. We do not sell it. We do not use it to develop, improve, or train generalized or non-personalized artificial intelligence or machine learning models.

Who we share Google user data with

We do not sell, rent, or trade Google user data. We share, transfer, or disclose it only:

• to a limited set of infrastructure and hosting providers that process data solely on our behalf, under contract, to operate TenGate Portal — these providers may not use the data for their own purposes;
• where you explicitly direct us to do so;
• where required by applicable law, regulation, or valid legal process.

We do not transfer Google user data to data brokers, advertising platforms, information resellers, or any party for advertising, credit, or lending purposes. Humans do not read your Google Calendar data except where you have given explicit consent for a specific request, where necessary for security purposes such as investigating abuse, to comply with applicable law, or where the data is aggregated and anonymized for internal operations.

How we protect Google user data

Google Calendar data and OAuth tokens are protected using: encryption in transit (TLS/HTTPS) for all connections to Google APIs and to TenGate Portal; encryption at rest for stored Calendar data and OAuth access and refresh tokens; restricted, authenticated, least-privilege access controls, so that only the authorized user and a limited number of personnel with an operational need can access the data; monitoring, logging, and secure infrastructure practices; and storage of OAuth tokens in a secured credential store, never in client-side code or public repositories.

How long we keep Google user data, and how it is deleted

We retain Google Calendar data only for as long as your Google Calendar connection remains active and it is needed to provide the features described above.

You may disconnect your Google account at any time from your TenGate Portal settings. On disconnection, we revoke the OAuth tokens and delete the stored Google Calendar data associated with your account. Events that TenGate previously created in your Google Calendar are left in place, so that disconnecting does not remove meetings from your personal calendar; you may delete them in Google Calendar yourself.

You may also revoke TenGate’s access directly at https://myaccount.google.com/permissions.

If you delete your TenGate Portal account, or email us at [email protected] to request deletion, all associated Google user data is deleted from our production systems within 30 days, and from routine backups within a further 30 days, except where retention is required by applicable law.

TenGate’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

5. Legal Basis for Processing

Where applicable, we process personal data because:

• It is necessary to provide our services
• You have given consent
• We have a legitimate business interest
• We are required by law

6. Sharing of Information

We do not sell personal information.

We may share information with:

• Hosting providers
• Cloud infrastructure providers
• Payment processors
• Analytics providers
• Customer support platforms
• Professional advisers
• Government authorities when legally required

Service providers are only permitted to use information as necessary to provide services on our behalf.

Google user data is subject to additional restrictions. We do not share Google user data with analytics providers, advertising providers, payment processors, or data brokers. Google user data is disclosed only to infrastructure and hosting providers acting on our behalf to operate the service, or where required by law, as described in Section 4.

7. Data Retention

We retain information only as long as necessary to:

• Provide services
• Maintain project records
• Meet contractual obligations
• Resolve disputes
• Comply with legal requirements

When data is no longer required, we will securely delete or anonymize it where reasonably possible.

Retention and deletion of Google user data, including Google Calendar data, is described in Section 4.

8. Security

We implement commercially reasonable safeguards to protect information, including:

• Encrypted connections (HTTPS)
• Access controls
• Authentication systems
• Monitoring and logging
• Secure infrastructure practices
• Encryption at rest for stored user data, including any Google user data and OAuth credentials
• Least-privilege access controls limiting internal access to sensitive data to personnel with an operational need

No internet-based system can be guaranteed to be 100% secure. Users are responsible for protecting their account credentials.

9. Cookies and Tracking Technologies

Our websites and applications may use:

• Essential cookies
• Authentication cookies
• Analytics cookies
• Performance monitoring tools

These technologies help us provide services, maintain security, and improve user experience.

Users may manage cookie settings through their browser.

10. Mobile Applications

The TenGate Portal mobile application may collect:

• Device identifiers
• Crash reports
• Application diagnostics
• Push notification tokens

Push notifications may be used to deliver:

• Task updates
• Support ticket updates
• Project notifications
• Account-related alerts

You may disable notifications through your device settings.

11. International Data Transfers

Information may be processed and stored in countries different from your own.

By using our services, you acknowledge that your information may be transferred to and processed in locations where data protection laws may differ from those in your jurisdiction.

12. Your Rights

Depending on your location, you may have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of information
• Restrict processing
• Object to processing
• Receive a copy of your data
• Withdraw consent where applicable

Requests may be submitted using the contact information below.

13. Children’s Privacy

Our services are intended for business users and individuals aged 18 years or older.

We do not knowingly collect personal information from children under 13.

If we become aware that such information has been collected, we will take reasonable steps to remove it.

14. Third-Party Services

Our services may contain links to third-party websites or integrations.

We are not responsible for the privacy practices or content of third-party services.

Users should review the privacy policies of those services independently.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Updates will be posted on our website and applications with a revised “Last Updated” date.

Continued use of the services after changes become effective constitutes acceptance of the revised policy.

16. Contact Information

TenGate

Website: https://10g8.com

Email: [email protected]

For privacy-related questions, requests, or complaints, please contact us using the information above.