Privacy policy

Who we are

APPSOCOM is a workspace app for email, chat, calls, calendar, tasks, customer support and an AI assistant, run by Appsotech Limited (“Appsotech”, “we”, “us”). This policy covers our website, the APPSOCOM apps for web, Android, iPhone and desktop, and the APPSOCOM chat widget that our customers place on their own websites.

APPSOCOM is sold to organisations. When your employer or another organisation (our “customer”) sets up a APPSOCOM workspace and invites you, that organisation decides why and how its workspace data is used, and we process it on its behalf under our Data Processing Agreement. For that data the organisation is the controller and Appsotech is the processor. For our own website, sales enquiries and account administration, Appsotech is the controller.

Questions about this policy can be sent to [email protected].

What we collect

Account and workspace information

Your name, work email address, profile photo, role, teams, the workspace you belong to, your theme and notification settings, and the devices you sign in from (including push notification tokens so calls and reminders can ring your phone).

Content you create or connect

• Email. Messages, attachments and folders in mailboxes you link: mail we host for your organisation, and Gmail, Outlook or IMAP accounts you choose to connect.
• Chat, calls and voice. Messages, files, voice and video notes, call details, and call recordings when a workspace turns recording on. In voice mode, what you say to the assistant is converted to text so it can respond.
• Calendar and tasks. Events, invitations, to-dos and reminders.
• Customer support. Conversations between your organisation’s customers and its team, and the knowledge base documents your organisation uploads.

Website visitors and chat widget

If you fill in our request-access form or use a APPSOCOM chat widget, we collect the name, email address, message and page address you send, plus your IP address for abuse prevention and rate limiting. The widget stores a small identifier in your browser so the conversation continues if you return. Our website stores your chosen theme and currency in your browser. We do not use advertising or cross-site tracking cookies.

Technical information

Logs of requests to our servers (IP address, time, device and app version, errors), kept to run, secure and debug the service.

How we use it

• To provide APPSOCOM: show your mail, chats, calls, calendar and tasks; ring your devices; and deliver what you send.
• To run the AI features you or your organisation turn on: summarising and prioritising new email, drafting replies you review, managing calendar and tasks at your request, answering customers from your organisation’s knowledge base, and speaking with you in voice mode and reminder calls.
• To keep APPSOCOM secure, prevent abuse, and fix problems.
• To reply to demo requests and support questions, and to bill our customers.

The assistant never sends an email, accepts an invitation or messages another person without your confirmation. Content of emails is treated as information to summarise, never as instructions to the assistant.

We do not sell personal information, we do not use it for advertising, and we do not use your content to train AI models, ours or anyone else’s.

Google user data

If you link a Gmail account, APPSOCOM asks Google for permission to read, compose, send and organise your Gmail messages and to see your email address and basic profile. We use this access only to provide the mailbox features you see in APPSOCOM: showing your inbox, sending mail you write or approve, organising messages, and, if you turn them on, AI briefings and reply drafts for your own use.

• Your Google sign-in token is stored encrypted (AES-256-GCM) and is never shown again or sent to your browser.
• Your Gmail messages stay in Gmail. APPSOCOM fetches them when you open your inbox or when briefings run, and keeps only what is needed to provide the feature, such as a cached summary.
• Message content is sent to our AI provider only to produce summaries and drafts for you, under terms that forbid the provider from using it to train models.
• People at Appsotech do not read your Gmail data unless you ask us to for support and give consent, it is needed for security or to comply with the law.
• You can unlink Gmail at any time in APPSOCOM, or remove APPSOCOM’s access in your Google Account settings. Unlinking deletes the stored token and cached Gmail data.

APPSOCOM’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Who we share it with

We share personal information only with the service providers that help us run APPSOCOM, under contracts that limit them to processing it for us, and with others only when the law requires it or to protect people’s safety.

Within a workspace, what other members can see depends on the workspace’s settings: for example, channel messages are visible to channel members, and support conversations to the answering team. Your linked personal mailboxes are visible only to you.

International transfers

Some of our providers process data outside Nigeria, including in the United States and the European Union. Where we transfer personal information abroad we rely on safeguards recognised by the Nigeria Data Protection Act 2023 and, where it applies, the EU and UK GDPR, such as contractual clauses with the provider.

Security

Connections to APPSOCOM are encrypted in transit. Mail passwords and sign-in tokens are encrypted with AES-256-GCM, and stored files are encrypted at rest by our storage provider. Access to production systems is limited to the staff who need it. No system is perfectly secure; if a breach affects your personal information, we will notify you and the relevant authorities as the law requires.

How long we keep it

We keep workspace content for as long as the organisation’s workspace is active, or until it is deleted by you or your organisation. When a workspace is closed we delete its data within 30 days, except where we must keep records (for example invoices) for longer by law. Server logs are kept for up to 90 days. Demo requests are kept for up to 24 months unless you ask us to delete them sooner.

Your rights

Depending on where you live, you can ask to access, correct, delete or receive a copy of your personal information, object to or restrict how it is used, and withdraw consent. If your data is part of an organisation’s workspace, please contact that organisation first; we will help them respond. You can also contact us at [email protected], and you can complain to the Nigeria Data Protection Commission or your local data protection authority.

Children

APPSOCOM is a business service and is not meant for anyone under 18.

Changes to this policy

If we make a material change, we will update the date at the top and tell workspace owners in advance by email or in the app.