Privacy Policy

Veetcuna collects account information such as name, email address, profile image, authentication provider, tenant membership, and role permissions so users can securely access the platform.

When users create or manage CRM leads, tasks, files, quotations, campaigns, forms, or landing pages, Veetcuna stores the business information entered by authorized users in their workspace.

When you sign in with Google, Veetcuna receives your Google account identifier, name, email address, email verification status and profile image to identify your account and provide access to your workspace. Veetcuna does not receive your Google password.

We use collected information to provide ERP, CRM, project management, CMS, restaurant, and related operational features to authorized teams.

Connecting Google Calendar is optional and requires additional consent. With calendar.events permission, Veetcuna creates, retrieves, updates and deletes events used by CRM agenda and booking workflows. With calendar.events.freebusy permission, it reads busy time ranges from your primary calendar to determine available booking slots and avoid scheduling conflicts. Event details can include a title, lead name, CRM link, start and end time, location and an optional Google Meet link.

Calendar event details supplied in Veetcuna are sent to Google to perform the requested scheduling operation. Veetcuna stores the connection status, granted scopes, account identifier, encrypted access and refresh tokens, token expiry, and event identifiers and links needed to maintain the integration. Availability responses are used to calculate booking slots.

We do not use Google Calendar data for advertising, profiling, or any unrelated purpose.

Veetcuna uses Google APIs only to provide sign-in, optional calendar and booking functionality, and the optional user-facing Work email client described below.

Veetcuna's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Google OAuth tokens are stored server-side and encrypted. You can revoke access at https://myaccount.google.com/connections at any time. Revocation prevents further authorized Google API access; it does not automatically delete your Veetcuna account, workspace records or events already created in Google Calendar.

Google user data is not sold, used for personalized advertising, or used to develop, improve or train generalized or non-personalized AI or machine learning models. We do not permit people to read Google user data except with your affirmative agreement for specific data, where necessary for security, to comply with applicable law, or for internal operations using aggregated and anonymized data.

Veetcuna does not sell personal information or Google user data.

Information may be shared only with service providers that help operate the platform, when required by law, or with authorized members of the same customer workspace according to their permissions.

Veetcuna uses authentication, tenant-scoped access controls, encrypted token storage, and permission-aware workflows to protect customer and user data.

No internet-based service can guarantee absolute security, but we work to protect data using reasonable technical and organizational safeguards.

Veetcuna retains information for as long as needed to provide the service, comply with legal obligations, resolve disputes, and enforce agreements.

To request access, correction, deletion of your personal data or removal of stored Google connection credentials, email soporte@veetcuna.com from the address associated with your account and identify the account or workspace concerned. We verify the request before acting. We retain only information still required for legal obligations, security, disputes or the authorized customer workspace; backup copies follow their retention lifecycle. Deleting Veetcuna data does not delete data held independently by Google or an AI provider.

Connecting an AI assistant is optional. Login and consent identify the application, your account and one workspace. The connection can access CRM records, contact details, activities, existing reports and file metadata within your current permissions. It cannot read attachment contents. Structured government identifiers and provider credentials are excluded from MCP inputs and responses; do not enter sensitive identifiers in free text.

Tool results are sent to the AI application you authorize, such as ChatGPT, Codex or Claude. That provider processes received information under its own terms and privacy policy. Authorize only applications you trust and request only the business data needed for the task.

Ordinary authorized creates and edits execute directly. Deletion, messages, publication and other sensitive operations require review and confirmation in Veetcuna. Pending confirmations expire after fifteen minutes. Revoking a connection does not undo completed business actions or delete information already received by the AI provider.

MCP access credentials expire after five minutes; rotating refresh credentials have a maximum connection lifetime of thirty days. Logout from the authorizing session, connection revocation or user blocking invalidates the connection. Manage and revoke connections in Account. Connection records, operation results and security audit metadata are retained for service integrity and the retention purposes described above. Pending operation arguments are encrypted; audit entries do not contain tool payloads or credentials.

For access, correction or deletion requests concerning Veetcuna data, contact soporte@veetcuna.com. Requests concerning copies held by an AI provider must also be directed to that provider. Workspace administrators remain responsible for authorizing access to their customer data.

Work optionally connects a private Gmail or Microsoft mailbox through delegated OAuth consent. It accesses messages, conversation headers and bodies, folders or labels, read and starred states, drafts and attachments to display mail, search, organize messages, and compose, reply, forward or send email at your direction. Gmail uses gmail.modify; Microsoft uses delegated Mail.ReadWrite and Mail.Send. Work does not obtain organization-wide application mailbox permissions.

Mailboxes and saved drafts remain with Google or Microsoft. Work stores the mailbox identifier, owner, granted scopes, encrypted access and refresh tokens, expiry and minimal operation records needed to prevent duplicate submissions. Mail content is fetched on demand and is not indexed as a separate mailbox archive in Veetcuna. Mailbox access is scoped to the connecting user; workspace administrators and delegated CRM MCP connections do not gain access to these messages.

When you attach a file, its temporary private copy is uploaded to UploadThing and transferred to the mail provider. Temporary copies are deleted after a confirmed transfer, with durable cleanup scheduled at 24 hours for interrupted uploads. Technical failures can delay deletion and are retried. Reading a message initially blocks remote images; choosing to display them can contact the image sender or host.

Disconnecting Work removes its stored mailbox access and refresh credentials without deleting your mailbox, messages or provider drafts. Google and Microsoft consent grants can also be revoked in the provider account settings. Work does not use mailbox data for advertising or to train generalized AI models. For deletion of retained connection or operation metadata, contact soporte@veetcuna.com.

For privacy questions, data requests, or Google Calendar access removal, contact us at soporte@veetcuna.com.