Legal Documentation

1. Data Collection

We collect information you provide directly to us, including:

• Name and contact information (email, phone number)
• Company information for business accounts
• Payment and billing information
• Trip and itinerary data you create within the platform
• Communication preferences

2. Google OAuth Data

When you sign in using Google, we collect the following data from your Google account:

• Email address: Used as your account identifier and for communications
• Name: Used to personalize your experience
• Profile picture: Displayed in your account settings

How we use Google data: We use this information solely to create and manage your Twize account. We do not access any other Google services or data beyond basic profile information.

Sharing: We do not sell, trade, or transfer your Google user data to third parties. Your Google data is never shared with advertisers or data brokers.

Storage: Your Google account data is stored securely in our database and is retained for as long as your account is active.

3. How We Use Your Data

Your data is used to:

• Provide and improve our travel management services
• Authenticate your identity and secure your account
• Process transactions and send related information
• Send service-related communications
• Respond to your comments and questions
• Comply with legal obligations

4. Data Security

We implement industry-standard security measures to protect your data, including Google user data:

• 256-bit SSL/TLS encryption for all data transmissions
• Encrypted storage for sensitive information
• Access controls and authentication mechanisms
• Secure cloud infrastructure (Google Cloud Platform)
• Regular security reviews

5. Data Retention and Deletion

We retain your data, including Google user data, for as long as your account is active or as needed to provide services.

• Account deletion: You can request deletion of your account and all associated data at any time by contacting us
• Google data: Upon account deletion, all Google-provided data (email, name, profile picture) is permanently deleted from our systems
• Backup retention: Deleted data may persist in encrypted backups for up to 30 days before permanent deletion

6. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a structured format
• Object: Object to processing of your data
• Withdraw consent: At any time for consent-based processing

To exercise these rights, contact us at privacy@twize.app