MDO Privacy Policy

Effective: September 15, 2026

1. Information we process

To manage membership and connected services, MDO may process your Google account identifier, email address, login and session information, Google connection status, identifiers required for the MDO-managed workspace, subscription status, configuration versions, and system-state information.

When you authorize a Google Workspace connection, MDO may process, only as needed to provide requested features, Google Calendar metadata and events, data in the MDO-managed area of Google Drive and Sheets, files you explicitly select, and contact information from Google Contacts.

If you submit a support or error report, MDO may process the support category, description you enter, images you explicitly attach, your signed-in email address, the screen where the issue occurred, submission time, browser and device information, selected AI configuration, and deployed product version for support and incident diagnosis.

2. Google authentication information

Refresh Tokens required for Google connections are encrypted on the server. MDO does not intentionally store them in plaintext or write them to logs. Authentication information is used only to perform permitted requests against the Google resources connected by the user.

3. How Google Workspace data is used

Google Calendar data is used to read the calendars and events you connected and, when you request it, to create, update, or delete events and verify the result.

Google Drive and Sheets data is used to operate your MDO management workspace, provide requested record, evidence, and dashboard functions, and connect or open files that you explicitly select.

Google Contacts data is used on a read-only basis to find or confirm contacts when you request it. MDO does not arbitrarily create, modify, or delete contacts in Google Contacts.

4. Detailed user data and attachments

Detailed records such as revenue, expenses, customers, counterparties, receipts, calendar-event content, and report bodies are generally stored in your Google Sheets, Calendar, or Drive and are not copied as source records into the MDO database.

Photos, receipts, and document images that you attach for a record may be optimized before transmission for suitable display and evidence review. Once the related record is verified as saved, the attachment may be stored in the evidence area of your Google Drive. MDO retrieves those files using the signed-in user's authorized Google access and does not create public Drive links for them.

Attachments use your Google Drive storage. If the account has insufficient Drive capacity, new attachments may not be saved, and any additional storage is subject to Google's own terms and pricing.

MDO does not automatically attach detailed content from your Google workspace when you send a support request. The support message and support-only image originals are not separately persisted in the MDO database.

5. Sharing, transfer, and disclosure of Google user data

MDO does not sell Google user data or provide it for advertising, retargeting, data brokerage, credit scoring, or general-purpose profiling. Google user data may be transferred to the following service providers only to the minimum extent necessary to provide user-facing MDO functionality.

MDO may use a contracted email-delivery service to route support and error reports to the operator. In that case only information the user directly entered or attached to the support request is transmitted; detailed Google Workspace data is not automatically included.

MDO does not otherwise disclose Google user data to third parties, except where necessary for security investigations, compliance with law, or legally required corporate transactions such as a merger, acquisition, or asset transfer. Where required, MDO will provide notice or obtain consent in accordance with applicable law and Google policy.

6. AI/ML processing and Google Limited Use

MDO currently uses the OpenAI API Platform as a third-party AI processing service. Source data and derived data received from Google Workspace APIs are used only for inference needed to provide the requesting user's MDO functionality and are not used to create, train, fine-tune, or improve foundation models or generalized machine-learning or AI models for other users.

MDO does not use Google user data for advertising, sale, data brokerage, or secondary purposes unrelated to the user's MDO functionality. Human access to Google user data is limited to cases where the user has given explicit consent or where access is required for a security investigation or legal obligation.

The use of information received from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

7. Purposes of processing

MDO processes the information above to sign users in and identify accounts, connect and recover Google access, verify each user's MDO workspace, present MDO screens, perform requested record and attachment operations, manage calendars, look up contacts, process user requests with AI, analyze the management workspace, administer subscriptions and entitlements, provide support, and protect service security and reliability.

8. Retention and deletion

Account, connection, and subscription information held by MDO is processed for as long as necessary to provide the service and satisfy applicable legal retention obligations. When an account is deleted or a connection is revoked, information that can be deleted is handled according to MDO's applicable deletion procedures. Original data and attachments stored in your Google account are not deleted merely because an MDO trial or subscription ends.

When Google Workspace data is processed by external service providers, those providers' applicable data processing and retention rules may apply to the extent necessary to provide functionality, prevent abuse, maintain security, or satisfy legal obligations. MDO does not provide Google user data to an external AI provider for model training or general-purpose data sharing.

Support messages and support-only attachments are not separately stored in the MDO application database; email delivery and receiving systems used for support may apply their own retention policies.

9. Safeguards

MDO applies technical and operational controls including encryption of authentication information, per-user access boundaries, prohibition on logging source customer data, separation of secrets, HTTPS transport, prohibition on arbitrary HTML/JavaScript execution, and authenticated private access checks for attachments.

10. Your rights and contact

You may request access to, correction of, deletion of, or restriction of processing for your personal information where applicable. Privacy and service requests can be sent to [email protected]. The operator's registered business information is shown in the footer of MDO.

Terms of Service · Billing & Subscription

Back to manage
MDO Privacy Policy