Privacy Policy

Last updated: [DATE]

1. Introduction

This Privacy Policy explains how [COMPANY LEGAL ENTITY NAME] ("Kombinator," "we," "us," or "our") collects, uses, discloses, and safeguards your information when you use our website at kombinator.com and our software application at app.kombinator.com (together, the "Service").

Kombinator is an operating system for general contractors that helps businesses manage leads, appointments, sales pipelines, and follow-ups. By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2. Information we collect

Information you provide

• Account & business information: your name, email address, phone number, company name, and role, along with the details of your team members you add to the Service.
• Customer & operational data: the contact records, leads, appointments, notes, and pipeline information you and your team enter into Kombinator to run your business.
• Contact form submissions: information you send us through our website contact form, such as your name, company, email, phone number, and message.

Information collected automatically

• Usage data: how you interact with the Service, including pages viewed, features used, and timestamps.
• Device & log data: IP address, browser type, operating system, and similar technical information collected through standard server logs.

Information from third parties

When you connect a third-party service such as Google Calendar, we receive information from that service as described in the "Google user data" section below, subject to the permissions you grant.

3. How we use information

We use the information we collect to:

• Provide, operate, maintain, and improve the Service;
• Create and manage your account and authenticate users;
• Create, display, and synchronize appointments and calendar events;
• Respond to your inquiries, including contact form submissions, and provide customer support;
• Send you service-related communications, such as administrative messages and security alerts;
• Monitor and analyze usage to improve functionality and protect the Service;
• Detect, prevent, and address technical issues, fraud, or abuse;
• Comply with legal obligations.

We do not sell your personal information, and we do not use it for advertising.

4. Google user data

Kombinator integrates with Google Calendar so your team can manage appointments where they already work. This section describes how we access, use, store, and share Google user data, and applies in addition to the rest of this policy.

What we access

With your explicit authorization through Google's OAuth consent screen, Kombinator requests access to your Google Calendar in order to:

• Create and manage appointment events on your behalf when you book or update an appointment in Kombinator; and
• Read your calendar's busy times so we can show availability and help avoid double-booking site visits.

Per-user and revocable

This access is granted per individual user and is entirely optional. You may revoke Kombinator's access at any time through your Google Account settings at myaccount.google.com/permissions or from within the Service. Revoking access stops further synchronization.

Limited Use commitment

Kombinator's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google user data to provide and improve the calendar features described above;
• We do not transfer or sell Google user data for advertising, marketing, or other unrelated purposes;
• We do not allow humans to read Google user data unless we have your affirmative consent for specific data, it is necessary for security purposes (such as investigating abuse), to comply with applicable law, or the data has been aggregated and anonymized;
• We do not use Google user data to train generalized or non-personalized artificial intelligence or machine learning models.

Storage of Google data

We store only the minimum Google Calendar data needed to operate the integration, such as event identifiers and the times of events we create or reference. This data is protected using the safeguards described in the "Security" section and is deleted when you disconnect the integration or delete your account, subject to the "Data retention" section.

5. Sharing & third parties

We share information only in the following circumstances:

• Service providers: with vendors who help us operate the Service (for example, cloud hosting and infrastructure providers) under contractual confidentiality and data-protection obligations.
• Within your organization: data you enter is accessible to authorized members of your Kombinator account, according to their roles and permissions.
• Legal requirements: when required to comply with applicable law, regulation, legal process, or enforceable governmental request.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to the protections of this policy.

We do not sell your personal information or your customers' information to third parties. Our primary hosting and infrastructure providers are listed here: [LIST SUB-PROCESSORS / HOSTING PROVIDERS].

6. Data retention

We retain your information for as long as your account is active or as needed to provide the Service. We will delete or anonymize your information within a reasonable period after your account is closed, except where we are required to retain it to comply with legal obligations, resolve disputes, or enforce our agreements. You may request deletion of your data as described under "Your rights."

7. Security

We implement administrative, technical, and physical safeguards designed to protect your information, including encryption in transit, access controls, and least-privilege practices. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. If we become aware of a breach affecting your information, we will notify you as required by applicable law.

8. Your rights

Depending on where you live, you may have the right to access, correct, update, or delete your personal information, to object to or restrict certain processing, and to request a copy of your data. To exercise these rights, contact us at [PRIVACY CONTACT EMAIL]. You may also revoke Google Calendar access at any time as described in the "Google user data" section. We will respond to requests in accordance with applicable law.

9. Cookies & similar technologies

We use a small number of cookies and similar technologies that are necessary to operate the Service, such as keeping you signed in and remembering preferences, and to understand how the Service is used so we can improve it. You can control cookies through your browser settings; disabling some cookies may affect how the Service functions. [ADD COOKIE BANNER / DETAILS IF ANALYTICS COOKIES ARE USED]

10. Children's privacy

The Service is intended for businesses and is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you through the Service. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

12. Contact us

If you have questions about this Privacy Policy or our data practices, contact us at:

Kombinator
[COMPANY LEGAL ENTITY NAME]
[MAILING ADDRESS]
[PRIVACY CONTACT EMAIL]

Or reach us through our contact form.