THE GOLDEN EMPIRE

WE BUILD BUILDERS

CRM privacy notice

TGE Empire CRM is The Golden Empire's system for managing service inquiries, quotes, appointments, projects, invoices, agreements, and client deliveries. The business operator connects its own Google and Square accounts. Clients sign in to the client portal with ChatGPT and can access only records linked to their sign-in email.

Information used

The CRM processes client names, email addresses, supplied inquiry details, communication-consent choices, quotes, appointment times, project records, agreements, payment references and status, and files linked to a project. Square handles payment credentials; the CRM uses payment references and verified transaction status rather than storing card details. The portal receives the signed-in client's email and optional name from its hosting authentication service.

Google services

The business connects thagoldenempire@gmail.com. Gmail sending access sends approved business messages from that account. The separate Calendar connection checks availability and creates appointment events. The Drive connection creates encrypted backups and reads business-selected agreement/delivery files so authorized clients can access them. Drive read-only authorization is account-wide; client access is still checked against CRM ownership and release rules before a file is delivered. Gmail inbox-reading permission is not requested by this mail connection.

Google account access tokens and refresh credentials are stored privately on the operator's Mac and server. They are not included in public website code. Encrypted backups are stored on the server and in the connected business Google Drive; the decryption key is kept separately. The owner address langstonehughes@gmail.com receives forwarded business mail and private copies of CRM-generated business messages when sending is enabled.

Purpose and service providers

Information is used to operate the requested business services, maintain records, prevent unauthorized access, and recover the system after a failure. Google account data is not used by the CRM for advertising or AI-model training and is not sold. The configured services involved are Google, Square, OVHcloud hosting, and the ChatGPT Sites hosting/authentication platform. Each provider also applies its own terms and privacy practices.

Retention and requests

The current CRM does not automatically delete all business records after a fixed interval. Live records remain until the business deletes or archives them; encrypted backups use a 30-day server retention and 90-day Google Drive retention policy. Cleanup runs after a successful backup and integrity checks, preserves at least the newest three backups, and pauses if a safe recovery copy cannot be verified. Older eligible Drive copies are moved to Trash, not permanently erased. Earlier untagged Drive backups are preserved for manual review. Removing a live record does not immediately remove it from older backups. Access logs and security records may remain for system operation and review.

Contact thagoldenempire@gmail.com to request access, corrections, deletion review, or help with a privacy concern. Disconnecting the Google authorization stops future authorized Google API access, but does not automatically delete business records already held by the CRM or existing backups.

The application's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.