Privacy policy

The True North Operations Portal ("the portal", at truenorthportal.online) is the internal work tool of True North Digital Marketing ("True North", "we"). The people who use it are True North's team members and contractors, and the people outside True North who book a meeting with them through a public booking page. This page explains what information the portal keeps, how it uses information from Google accounts, and the choices you have.

Information the portal keeps

• Work details about team members: name, work email, role, team, hours worked, time off, and the information needed to pay them.
• Meetings and events created in the portal: title, time, guests, description, and video link.
• For people who book a meeting through a public booking page: the name, email address and note they type in, and the time they pick.
• Basic technical records needed to run the service securely, such as sign-in times and error logs.

Information from your Google account

A team member can choose to connect a Google account in Agenda settings. True North can also connect its shared team calendar account. When an account is connected, the portal asks Google for these permissions, and uses each one only as described:

• Your email address and basic account identity (openid, userinfo.email): to know which Google account was connected and show it in Agenda settings.
• Your calendar events (calendar.events): to create, change and delete the events you make in the portal on your Google Calendar, with a Google Meet link, and to show you the events on that calendar inside the portal.
• When you are free or busy (calendar.freebusy): to find times that suit everyone when you schedule a meeting, and to offer only your free times on your booking page. The portal reads busy times, not what the busy events are.
• Files the portal creates in Google Drive (drive.file): only for True North's shared account, to save receipts and invoices the portal produces. The portal cannot see any other file in that Drive.

The portal keeps the sign-in tokens Google gives it so it can do these things without asking you to sign in every time. They are stored on True North's own server, are never shown in a browser, and are used only for the actions above.

Google API Services User Data Policy

The portal's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• Google data is used only to provide and improve the scheduling features you see in the portal.
• Google data is not sold, not used for advertising, and not used to build profiles of anyone.
• Google data is not shared with anyone, except as needed to provide those features, to comply with the law, or with your consent.
• No person at True North reads your Google data, unless you ask us to for support, it is needed for security, or the law requires it.
• Google data is not used to train artificial intelligence or machine learning models.

Who we share information with

We do not sell personal information. The portal runs on a server True North rents, and uses a small number of services to work: Google (calendars, Meet and Drive, for connected accounts), an email service to send confirmations and notices, and the payroll and HR tools True North already uses. Each receives only what that task needs.

How long we keep it, and deleting it

• You can disconnect a Google account at any time in Agenda settings. The portal then deletes its tokens for that account and asks Google to cancel its access. You can also remove the portal from your Google account at myaccount.google.com/permissions.
• Busy times read from Google are kept only as long as needed to show schedules, and are refreshed or removed as the calendar changes.
• Work records (hours, time off, invoices) are kept as long as the law and True North's accounting require.
• To ask for a copy of your information, or for it to be corrected or deleted, write to [email protected].

Security

Information travels encrypted (HTTPS). Access inside the portal depends on each person's role, and sign-in can require a second step. Sign-in tokens and keys are kept on the server only.

Changes and contact

If this policy changes, the new version is posted on this page with a new date. Questions about privacy go to True North Digital Marketing at [email protected].