Privacy Policy

1. Introduction

Excellurite ("Excellurite", "we", "us", "our") operates the business operating system available at excellurite.com. This Privacy Policy explains what information we collect, how we use it, how we protect it, and the choices you have. By using Excellurite you agree to the practices described in this policy.

2. Information we collect

2.1 Account information

When you register we collect your name, email address, company name, country and password (stored only as a secure hash). Workspace administrators may add team members with name, email, job title, department and reporting details.

2.2 Workspace data

Data you enter into the platform — projects, tasks, CRM records, employee records, candidates, documents, expenses, invoices, time entries, calendar events, workflow rules and messages — is stored inside your isolated workspace.

2.3 Billing information

Subscriptions are processed by PayPal. We store subscription status, plan, seat counts and billing events; we never see or store your card details.

2.4 Connected integrations

When you optionally connect a Google or Microsoft account, we store OAuth tokens (encrypted), the connected account identifier, and content you choose to access through the integration — such as Gmail message metadata, email bodies you open, and calendar events you create or sync.

2.5 Technical data

We automatically collect standard technical data such as IP address, browser type, timestamps, audit events and error logs needed to operate and secure the service.

3. How we use your information

• To provide, operate and secure your workspace and its features.
• To sync emails and calendar events through integrations you connect.
• To send transactional emails such as invitations, confirmations and password resets.
• To process subscriptions and enforce plan and seat limits.
• To power product features including dashboards, analytics and the Excellurite AI assistant using your workspace context.
• To audit actions inside the workspace for security and accountability.
• To comply with legal obligations.

4. Google user data

If you connect a Google account, Excellurite requests access to your Gmail (read and send scopes) and Google Calendar (read and event scopes). Google's use of your information is governed by the Google Privacy Policy.

Excellurite's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements:

• We only use Google data to provide the user-facing features you request — viewing your inbox, sending and replying to email from your connected mailbox, and creating or updating calendar events you choose to sync.
• We do not sell Google user data, and we do not use it for advertising.
• We do not allow humans to read your email or calendar content, except when required for security, legal compliance, or when you explicitly ask us to help you (for example, support).
• We do not use Google user data to train generalized AI models.
• We do not transfer Google user data to third parties except as necessary to provide the service (for example, our hosting and database infrastructure), to comply with the law, or with your explicit consent.

You can disconnect a Google integration at any time from the Integrations page, which revokes our stored tokens. You can also revoke access from your Google Account permissions page.

5. Microsoft user data

If you connect a Microsoft account, the same principles apply: Outlook mail and calendar data is used only to provide the connected features you request, is stored securely, and is never sold or used for advertising.

6. Data sharing and third parties

We do not sell your personal data. We share data only with service providers needed to operate Excellurite — cloud hosting, database infrastructure, PayPal (payments), SendGrid (transactional email delivery) and OpenAI (AI features, using workspace context you submit) — and only to the extent required for those services to function, or when required by law.

7. Data retention

Workspace data is retained while your workspace is active. You can disconnect integrations, delete records and cancel your subscription at any time. Backup and log data may persist for a limited period for disaster recovery and security, after which it is deleted.

8. Security

We use TLS encryption in transit, encryption at rest for credentials and OAuth tokens, hashed passwords, tenant-level data isolation, role-based permissions and audit logging. No method of transmission or storage is 100% secure, but we continuously work to protect your information.

9. Your rights

Depending on your jurisdiction you may have rights to access, correct, export or delete your personal data, or to object to certain processing. Workspace administrators control member data inside their workspace. To exercise your rights contact us at the address below.

10. Cookies and storage

We use browser storage to keep you signed in and remember interface preferences. We do not use third-party advertising or tracking cookies.

11. Children

Excellurite is a business product and is not directed at children under 16. We do not knowingly collect data from children.

12. Changes to this policy

We may update this policy from time to time. Material changes will be posted on this page with an updated date.

13. Contact

Questions about this policy or your data? Email us at excellurite@excellurite.com.