Legal
Privacy Policy
Last updated: March 6, 2026
This Privacy Policy explains how Groupwide, also referenced as we, our, or us, collects, uses, discloses, and safeguards personal information when you use our website, authentication services, and group-management platform.
This policy is designed to support transparency expectations from major platform providers, including identity providers such as Google, and to align with applicable data protection principles (including GDPR and similar regulations).
1. Who We Are
Groupwide is a software platform for organizing contribution groups, member workflows, and transparent decision-making. For privacy matters, Groupwide is the data controller for account and product-usage data we process for our own operational purposes.
Contact: privacy@groupwide.app
2. Scope and Applicability
This policy applies to:
- Public pages on our website.
- User authentication and account registration flows.
- Dashboard, group administration, member records, and voting features.
- Support communications and service notifications.
It does not apply to third-party services you access independently through links on our platform.
3. Information We Collect
3.1 Account and Identity Data
- Name, email address, and authentication identifiers.
- Profile details provided during sign-up or account updates.
- When using Google Sign-In: basic profile information made available by your Google account settings.
3.2 Product Usage and Group Data
- Group names, member records, admin roles, poll content, and voting outcomes.
- Operational metadata such as timestamps and status fields needed for platform workflows.
3.3 Device, Log, and Technical Data
- IP address, browser type, device characteristics, and request logs.
- Security logs and diagnostic events for fraud prevention and service reliability.
3.4 Communication Data
- Messages you send to us through support channels.
- Feedback, product requests, and compliance inquiries.
4. How We Use Personal Information
- Provide, secure, and maintain the Groupwide service.
- Authenticate users and protect accounts from unauthorized access.
- Enable group workflows including member management, admin approvals, and voting.
- Respond to support requests and communicate service updates.
- Monitor availability, performance, abuse, and suspicious behavior.
- Comply with legal obligations, resolve disputes, and enforce platform policies.
5. Legal Bases for Processing (EEA/UK)
- Contract: To provide the service you request and maintain your account.
- Legitimate Interests: To secure, improve, and operate the platform responsibly.
- Consent: For optional cookie categories and certain communications where legally required.
- Legal Obligation: To comply with applicable laws, lawful requests, and regulatory duties.
6. Cookies and Similar Technologies
We use strictly necessary cookies to deliver core functionality (for example, session continuity and security). Optional cookies are used only based on your choices in the cookie consent banner.
Read full details in our Cookie Policy.
7. Sharing and Disclosure
We do not sell personal data. We may share data with:
- Infrastructure and hosting providers that process data on our behalf under contractual safeguards.
- Identity and authentication providers (such as Google OAuth) where you choose those sign-in methods.
- Security, compliance, and support vendors as necessary for service operations.
- Authorities where disclosure is required by law or legal process.
8. Google API Services User Data Disclosure
Groupwide uses Google account information obtained through Google Sign-In only to authenticate users and operate account access within the platform.
Groupwide use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
9. International Transfers
Your information may be processed in countries outside your residence. Where required, we use appropriate transfer safeguards such as contractual protections and vendor due-diligence measures.
10. Data Retention
We retain personal data for as long as reasonably necessary to provide services, meet legal obligations, resolve disputes, and enforce agreements. Retention periods depend on data type, purpose, and applicable law.
11. Security Measures
We apply administrative, technical, and organizational safeguards designed to protect personal data, including access controls, encryption in transit, and security monitoring. No system can be guaranteed 100% secure, but we continuously improve our controls.
12. Your Privacy Rights
Depending on your jurisdiction, you may have rights to:
- Access and receive a copy of your personal data.
- Correct inaccurate or incomplete information.
- Delete personal data, subject to legal exceptions.
- Restrict or object to certain processing activities.
- Withdraw consent where processing is based on consent.
- Request portability where applicable.
To exercise rights, contact us at privacy@groupwide.app. We may verify identity before fulfilling requests.
13. Children’s Privacy
Groupwide is not directed to children under the age required by law in your jurisdiction. We do not knowingly collect personal information from children. If you believe a child has provided information, contact us so we can investigate and take appropriate action.
14. Terms of Use
Your use of Groupwide is subject to platform rules, acceptable use standards, and account responsibilities described in this legal notice and related service documentation. By accessing Groupwide, you agree not to misuse the service, interfere with operations, or attempt unauthorized access.
Read our complete terms here: Terms of Service.
15. Policy Changes
We may update this Privacy Policy periodically to reflect legal, technical, or business changes. If updates are material, we will publish a revised date and provide additional notice when required.
16. Contact Us
For questions or concerns about privacy and data protection, contact us at privacy@groupwide.app.