Date of Last Update: March 27, 2026
At Truewind, we take privacy seriously. This Privacy Policy explains how we collect, use, store, disclose, and protect personal data when you visit our website or use our products, services, and applications, including Workpaper Agent.
Scope of this Privacy Policy
This Privacy Policy applies to personal data we collect through our website, product, and related services. It also describes how we handle Google user data when a user chooses to connect Google Drive to Truewind.
Information We Collect
We may collect:
- Contact and account information such as name, work email address, company name, and login credentials.
- Billing and transaction information needed to provide the service.
- Device, usage, and diagnostic information such as IP address, browser type, pages viewed, referring URLs, and product interaction data.
- Customer content and files that users upload, import, create, or export through the service.
- Support and communications data when you contact us.
Google Drive Data We Collect
When a user chooses to connect Google Drive to Truewind for Workpaper Agent, we may collect and process:
- Google account identifiers such as email address and Google account subject identifier.
- Google Drive file and folder metadata needed to show the user available files and folders, including names, identifiers, paths, MIME types, timestamps, and file sizes.
- The contents of a Google Drive file that the user explicitly selects to import into Workpaper Agent.
- Metadata and file contents needed to create, update, or export a workpaper file to a Google Drive folder the user explicitly selects.
- OAuth access tokens and refresh tokens required to maintain the authorized connection. These tokens are stored in encrypted form.
How We Use Personal Data
We use personal data to:
- Provide, operate, maintain, secure, and improve the service.
- Authenticate users and manage accounts.
- Process transactions, respond to requests, and provide support.
- Analyze product performance and troubleshoot issues.
- Comply with legal obligations and enforce our terms.
- Send service-related communications.
We may also use website and marketing data to understand interest in our services and improve our website, campaigns, and communications.
How We Use Google Drive Data
We use Google Drive data only to support user-initiated product features in Workpaper Agent, including:
- Identifying the Google account that the user connected.
- Allowing the user to browse files and folders within the Google Drive location the user configured.
- Importing a file the user explicitly selects into a workpaper workflow.
- Creating folders as needed and creating or updating exported workpaper files in the Google Drive destination the user explicitly selects.
- Maintaining the authorized Google Drive connection so the feature continues to work.
Google User Data Restrictions
Truewind does not use Google user data obtained through Google Workspace or Google Drive APIs to:
- Sell Google user data.
- Serve, target, or measure advertisements.
- Build advertising profiles.
- Train generalized or non-customer-specific artificial intelligence or machine learning models.
- Use Google user data for any purpose unrelated to the user-facing features the customer requested.
How We Share Personal Data
We may share personal data with:
- Service providers and subprocessors that help us host, operate, secure, support, and maintain the service.
- Professional advisors, auditors, insurers, and legal representatives when necessary.
- Government authorities or other third parties when required by law, regulation, legal process, or to protect rights, safety, and security.
- A successor entity in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets.
We do not sell personal data. We do not share Google user data except as needed to provide the requested service, comply with law, or protect rights, safety, and security.
Data Retention
We retain personal data for as long as needed to provide the service, comply with legal obligations, resolve disputes, enforce agreements, and maintain appropriate business records. We retain Google Drive connection tokens and related metadata only as long as needed to maintain the authorized integration or as otherwise required by law or contract. We may retain de-identified or aggregated information that does not identify you.
Security
We use administrative, technical, and organizational safeguards designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. For Google Drive integrations, OAuth credentials are stored in encrypted form. No security measure is perfect, and we cannot guarantee absolute security.
Cookies and Analytics
We use cookies and similar technologies to operate our website, understand website usage, remember preferences, and measure the effectiveness of our marketing and website experience. You can control cookies through your browser settings. Disabling cookies may affect site functionality.
Your Choices and Rights
Depending on where you live, you may have rights to access, correct, delete, or restrict certain personal data, or to object to certain processing. You may also disconnect a Google Drive integration from within the product. To make a privacy request, contact us at support@trytruewind.com.
Children's Privacy
Our services are not directed to children, and we do not knowingly collect personal data from children.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will post the updated version on this page and may provide additional notice when required.
Contact Information
If you have questions about this Privacy Policy or our data practices, contact us at support@trytruewind.com.