Privacy Policy

Overview

MAJ Platform is an internal business operations application used by Maj's Magical Plumbing and MAJ Construction Inc. This Privacy Policy explains the information the platform processes and the safeguards used to support those business operations.

Information processed by MAJ Platform

Depending on how MAJ Platform is used, information may include:

• Customer and contact names, phone numbers, email addresses, and service or billing addresses.
• Jobs and projects, proposals, invoices, contracts, and service reports.
• Payments, transactions, accounting information, and related financial records.
• Photos, files, attachments, communications, and other related business records.
• Authorized-user, company-access, activity, and security information needed to operate the platform.

MAJ Platform uses this information to manage authorized business operations, prepare and deliver documents, maintain records, provide requested features, and protect the platform.

Google Workspace and Gmail

A company may choose to connect a Google Workspace or Gmail account through Google OAuth. MAJ Platform uses this connection only to identify the connected Google account and to send customer-facing email on behalf of the connected company.

The Google access scopes currently requested are limited to:

• openid
• https://www.googleapis.com/auth/userinfo.email
• https://www.googleapis.com/auth/gmail.send

MAJ Platform does not request Gmail read, modify, metadata, inbox, or mailbox access and cannot read the connected mailbox. Google OAuth refresh tokens are encrypted and stored server-side; they are not exposed to browser JavaScript. Gmail access tokens are temporary and are not permanently stored.

Authorized users can disconnect their company's Gmail connection from MAJ Platform. Disconnecting stops future Gmail API use by that company connection unless it is authorized again. Users may also revoke access from their Google Account permissions.

MAJ Platform's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.

Sharing and sale of data

MAJ Platform does not sell personal or business data. Information may be processed by service providers that support hosting, authentication, storage, communications, and other platform functions, subject to their applicable terms and safeguards. Information may also be disclosed when required by law or reasonably necessary to protect users, the companies, or the platform.

Security and retention

MAJ Platform uses reasonable administrative, technical, and organizational safeguards designed to protect information, including company-based access controls and server-side protection for sensitive credentials. No system or method of transmission can guarantee absolute security.

Business records are retained as reasonably needed for operational, accounting, legal, security, and backup purposes. Authorized users may update business information or use available deletion and connection-management controls, subject to recordkeeping requirements.

Contact

Questions about this Privacy Policy or MAJ Platform privacy practices, including appropriate requests concerning retained information, may be sent to maj@majplumbing.com.