Privacy policy

Who we are

LioncrestOS (“the service”, “we”, “us”) is a customer relationship management platform provided by Lioncrest Strategies at lioncrestos.com. Businesses (“customers”) use LioncrestOS to manage their contacts, deals, projects, meetings, forms, quotes and invoices. Each customer has its own workspace.

For information a customer puts into its workspace (for example its contacts and their details), the customer decides what is collected and why, and we process it on the customer's behalf. For account information about the people who sign in to LioncrestOS, we are responsible for it as described here.

Information we collect

Account information

• Your name, email address, phone number, job title, timezone and, if you add one, a profile photo.
• Your password, stored only as a one-way hash, and multi-factor authentication settings if you turn them on.
• Your role and the workspaces you belong to, set by your workspace administrator.

Workspace content

Everything your workspace stores: contacts, companies, deals, tasks, notes, documents, meetings, form submissions, quotes, invoices, expenses and the workspace's business details and logo. This content belongs to the customer that owns the workspace.

Information from people who interact with a workspace

• Meeting bookings: when someone books time on a workspace's booking page, we collect the name, email, optional phone number, additional guest emails, answers to the host's questions, notes and timezone they provide.
• Forms: when someone submits a form built in LioncrestOS, or a form on a customer's own website that the customer has connected, we store the submitted answers and the page it was submitted from.

Technical information

To keep the service secure and working, we record sign-in times, the IP address used for requests (for rate limiting and abuse prevention), and an audit trail of changes made inside each workspace. We use cookies and browser storage only to keep you signed in, remember your interface preferences, and support the usage information described below. We do not use advertising or third-party tracking cookies.

Product usage

To understand how LioncrestOS is used and where to improve it, we keep basic usage information while you are signed in: which parts of the app you use, when, and for roughly how long, along with your browser type and IP address.

This tells us things like which features are popular, which ones people struggle with, and when people are online, so we can plan improvements and schedule maintenance at quiet times. It does not include what you type, the contents of your records, or anything you search for. Visitors to public pages, such as booking pages, forms and the client portal, are not included.

This information is seen only by the Lioncrest Strategies team that runs the service. It is never shown to other users or workspaces, sold, or used for advertising.

Google user data

Connecting Google is optional. If you choose to, LioncrestOS uses Google OAuth for two features, and asks only for the permissions each feature needs, at the moment you use it:

• Sign in with Google (scopes: openid, email, profile). We read your Google account's unique ID, email address, whether that email is verified, and your name. We use them only to match you to an existing LioncrestOS user and sign you in. Google sign-in cannot create an account: an administrator must add you first.
• Connect Google Calendar (scope: https://www.googleapis.com/auth/calendar.events). When someone books a meeting with you through LioncrestOS, we create the event in your calendar, add the guests they listed and, if you chose Google Meet, attach a Meet link. We store the event's ID so the booking and the event stay linked. We do not read, list or change any other events in your calendar.

The access and refresh tokens Google issues are stored with your user account, are used only to perform the actions above, and are never shared with other users, other workspaces or third parties. You can disconnect Google Calendar from the Meetings page at any time, which deletes the stored tokens, and you can revoke LioncrestOS's access from your Google Account's third-party access settings.

LioncrestOS's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, we do not sell Google user data, do not use it for advertising, do not use it to train artificial intelligence or machine learning models, and do not allow people to read it except where you have given permission, where it is needed for security purposes or to comply with the law, or where the data has been aggregated and anonymised for internal operations.

How we use information

• To provide the service: sign you in, show and store your workspace's records, send booking confirmations and alerts.
• To keep it secure: detect abuse, prevent unauthorised access, and keep an audit trail your administrators can review.
• To improve the service: understand which features are used, and how, so we can decide what to build and fix.
• To support you when you contact us, and to tell you about important changes to the service.
• To meet legal obligations, such as tax records for invoices.

We do not sell personal information, and we do not use workspace content for advertising.

Sharing

We share information only as needed to run the service:

• Within a workspace: records are visible to that workspace's users according to their roles.
• Service providers: our hosting provider (servers and backups), our email delivery provider (confirmations and alerts), and Google, only for the features you connect. They process data on our instructions.
• Legal reasons: when required by law, or to protect the rights and safety of users and the service.

Retention and deletion

Workspace content is kept while the customer's account is active. Items you archive can be restored by administrators, and a contact can be permanently erased on request. When a customer closes its account, we delete or anonymise its workspace content within 90 days, except where we must keep records for legal reasons. Google tokens are deleted as soon as you disconnect the integration, or when you ask us to remove them. Product usage information is deleted automatically: screen visits after 180 days, and the record of who is currently online after 30 days.

Security

Connections are encrypted in transit. Passwords are hashed, multi-factor authentication is available, personal password-vault entries are encrypted, files such as profile photos are served from unguessable links, and website form keys are stored only as fingerprints. No system is perfectly secure, but we work to protect your information and will notify affected customers of any breach as required by law.

Your choices and rights

You can update your profile, change your password, turn on multi-factor authentication and disconnect Google at any time. You may ask to access, correct, export or delete your personal information. If your information is held in a customer's workspace (for example as a contact or a booking guest), please contact that business directly; we will help them respond.

Children

LioncrestOS is a business tool and is not directed at children under 16. We do not knowingly collect their information.

Changes to this policy

If we change this policy, we will update the date above and, for significant changes, notify workspace administrators before the change takes effect.

Contact

Questions or requests about privacy: jking@lioncreststrategies.com.