Data Privacy & Security

Privacy Policy

Last updated: August 22, 2026

1. Introduction

Welcome to PAS (Process Automation Suite) ("PAS," "we," "our," or "us"). PAS is a dedicated practice management and workflow automation platform for Chartered Accountants, tax professionals, and accounting firms to manage recurring compliance tasks, client entities, documents, and team schedules.

We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, disclose, and protect your information when you use the PAS web application, services, and third-party integrations (including Google Calendar).

2. Information We Collect

We collect information that you provide directly to us, as well as data necessary to operate and sync your practice workflows:

Account Information: When you register or sign in, we collect your name, email address, password hash, and profile information.
Workspace & Task Data: Information you create or upload within your workspace, including client and entity details, task titles, descriptions, due dates, status changes, and activity history.
Authentication & Session Data: Authentication tokens, IP addresses, browser user agent, and session identifiers necessary for security and session persistence.
Google User Data (When Connected): If you choose to connect your Google account for Google Calendar synchronization, we receive OAuth tokens (access and refresh tokens) and your Google account email address.

3. Google Calendar Integration & OAuth Scopes

PAS offers an optional Google Calendar integration allowing users to synchronize their assigned compliance tasks and deadlines directly into their Google Calendar in real time.

Scopes Requested:

https://www.googleapis.com/auth/calendar and https://www.googleapis.com/auth/calendar.events: Used to create and manage a dedicated secondary calendar in your Google account and to create, update, and delete event entries corresponding to your assigned tasks in PAS.
openid and email: Used to identify and display the connected Google email address in your settings.

How We Use Google Data:

Dedicated Calendar Creation: We create a dedicated secondary calendar (named PAS - [Workspace Name]) so your personal calendars remain separate and untouched.
One-Way Task Sync: When tasks are created, rescheduled, completed, or assigned to you in PAS, we push corresponding calendar events with deadlines, task titles, and direct links back to PAS.
No Unrelated Data Access: PAS only accesses and modifies the dedicated calendar and events created by our service. We do not read, access, or alter any of your unrelated personal, business, or third-party calendars or events.

4. Google API Services User Data Policy Compliance (Limited Use Disclosure)

PAS's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do not sell, rent, or trade Google user data to any third party.
We do not use Google user data for serving advertisements (including retargeting, personalized, or interest-based advertising).
We do not use Google user data to train generalized artificial intelligence (AI) or machine learning (ML) models.
Human access to Google user data is strictly prohibited unless required to resolve user-requested technical support issues, required by law, or aggregated and anonymized for internal operations.

5. How We Use Your Information

We use the information collected exclusively to deliver and maintain our services:

Provide, operate, and maintain the PAS application and core workspace tools.
Authenticate user access and enforce role-based access control.
Send essential transactional notifications (task assignments, invitation links, password resets).
Synchronize task deadlines with Google Calendar when explicitly connected by the user.
Monitor service performance, debug issues, and ensure platform uptime and security.

6. Data Storage, Security & Retention

We implement industry-standard administrative, physical, and technical safeguards to protect your data from unauthorized access, loss, alteration, or disclosure:

Encryption: All data in transit is encrypted using HTTPS/TLS. Sensitive tokens, including Google OAuth credentials, are stored encrypted with AES-GCM in our secure database.
Access Control: Access to backend systems and production databases is strictly restricted to authorized personnel only.
Retention: We retain your data for as long as your workspace account is active. OAuth tokens are retained only while the Google Calendar connection is active and are deleted immediately upon disconnection.

7. User Control, Disconnection & Data Deletion

You retain complete ownership and control over your data and connected integrations:

Disconnecting Google Calendar: You can disconnect Google Calendar at any time from within the PAS workspace under Calendar Settings. Disconnecting immediately deletes the dedicated secondary calendar, removes stored OAuth tokens from our systems, and stops synchronization.
Revoking via Google: You can also revoke PAS's access directly at any time via your Google Account Security Settings at https://myaccount.google.com/permissions.
Account and Data Deletion: You may request complete deletion of your account, workspace data, and any associated records by contacting us. We will process data deletion requests in a timely manner in accordance with applicable laws.

8. Third-Party Sharing & Disclosure

We do not sell, rent, or lease your personal information to third parties. We may share data only under the following strict circumstances:

Service Providers: Trusted cloud hosting, database, and infrastructure providers who process data on our behalf under strict confidentiality and security obligations.
Legal Obligations: When required by law, regulation, subpoena, or legal process to protect our rights or the safety of our users.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When changes are made, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically to stay informed about how we are protecting your data.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how your data is handled, please reach out to us at:

PAS Support Team

Email: contact@oneasy.in