Privacy Policy

1. Information We Collect

Information You Provide Directly

• Account information: Name, email address, and password (hashed)
• Workspace data: Employee records, project data, financial entries, and other content you create within TotalApp
• Support communications: Messages you send when requesting assistance
• Payment information: Billing address and payment method details (credit card numbers are processed by our secure payment processor — we do not store them)

Information Collected Automatically

• Usage data: Which features you use, session durations, page views
• Device information: Browser type, operating system, IP address
• Log data: Access logs, error reports, and diagnostic information

Information from Third Parties

• OAuth providers: If you sign in with Google or GitHub, we receive your name, email address, and profile picture from that provider
• Integrations: When you connect TotalApp to services such as WooCommerce or Shopify, we receive the data you authorize us to process

2. How We Use Your Information

3. Information Sharing

We do not sell, rent, or trade your personal data to third parties. We may share your information only in these circumstances:

• Service providers: Trusted partners for infrastructure, email delivery, payment processing, and analytics
• Legal requirement: When required by a court order or applicable law
• Business transfers: In the event of a merger or acquisition, with prior notice
• With your consent: For any other purpose where you have given explicit consent

4. Data Retention

We retain data for as long as necessary to provide the service, or until you delete it. After you close your account, most personal data is deleted from our systems within 30 days. Some data may be retained longer for legal obligations, dispute resolution, or enforcement of our agreements.

5. Security

We implement industry-standard measures to protect your data against unauthorised access, alteration, or disclosure:

• TLS encryption in transit
• AES-256 encryption at rest
• Regular security audits and penetration testing
• Role-based access controls and the principle of least privilege
• 24/7 infrastructure monitoring

6. Cookies & Tracking

TotalApp uses only essential cookies for session management and authentication. We do not use third-party advertising or marketing cookies. The cookies we use are:

7. Your Rights

Depending on your location (under GDPR, CCPA, or other regulations) you may have the following rights:

To exercise any of these rights, email privacy@totalapp.app. We will respond within 30 days.

8. International Data Transfers

Your data may be processed in a country other than your own. When such transfers occur, we ensure your data is transferred under appropriate safeguards (such as Standard Contractual Clauses).

9. Children's Privacy

TotalApp is not designed for individuals under 16 and we do not knowingly collect personal data from them. If we learn that a child under 16 has provided us with personal data, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes at least 30 days before they take effect via your registered email address and/or an in-app notification. Continued use of the service after the new policy takes effect constitutes acceptance of the updated policy.

11. Contact Us