Privacy Policy

1. Introduction

Welcome to FYSK (Friends You Should Know). We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service, which helps you organize and remember contacts from your Gmail account.

2. Information We Collect

2.1 Information You Provide

• Google Account Information: When you sign in with Google OAuth, we receive your name, email address, and profile picture.
• Contact Organization: Tags, notes, and organizational information you add to your contacts.

2.2 Information from Gmail (Read-Only Access)

With your explicit consent, we access your Gmail to:

• Read email headers and sender information to identify contacts
• Extract contact names and email addresses from your correspondence
• Identify patterns in your email communications

Important: We only use read-only access to your Gmail. We cannot send emails, delete emails, or modify your Gmail account in any way. We do not read the content/body of your emails.

2.3 Automatically Collected Information

• Usage Data: How you interact with our service, features used, time spent
• Device Information: Browser type, operating system, IP address
• Log Data: Access times, pages viewed, errors encountered

3. How We Use Your Information

We use your information to:

• Provide and maintain the FYSK service
• Organize and enrich your contact information
• Improve our AI-powered contact search and tagging features
• Send you service-related notifications (with your consent)
• Detect, prevent, and address technical issues
• Comply with legal obligations

4. Data Storage and Security

4.1 Where We Store Data

Your data is stored securely in Microsoft Azure data centers. We use industry-standard encryption for data in transit (TLS/SSL) and at rest (AES-256).

4.2 Security Measures

• Encrypted connections (HTTPS) for all data transmission
• Database encryption at rest
• Regular security audits and updates
• Access controls and authentication
• OAuth 2.0 for secure Google authentication

4.3 Data Retention

We retain your data for as long as your account is active or as needed to provide services. You may request deletion of your data at any time (see Section 9).

5. Data Sharing and Disclosure

We do NOT sell your personal information to third parties.

We may share your information only in these limited cases:

• Service Providers: Third-party vendors who help us operate our service (e.g., cloud hosting, analytics). These providers are contractually obligated to protect your data.
• Legal Requirements: When required by law, court order, or legal process.
• Business Transfers: In connection with a merger, acquisition, or sale of assets (you will be notified).
• With Your Consent: Any other sharing will only occur with your explicit permission.

6. Third-Party Services

6.1 Google Services

FYSK uses Google OAuth for authentication and Gmail API for read-only access to your contacts. Your use of Google services is governed by Google's Privacy Policy.

6.2 AI Services

We may use AI services (such as OpenAI) to enrich contact information. These services process contact data according to their privacy policies and our data processing agreements.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

7.1 GDPR Rights (EU/EEA Users)

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a portable format
• Object: Object to certain types of processing
• Withdraw Consent: Withdraw consent at any time

7.2 CCPA Rights (California Users)

• Know what personal information we collect and how it's used
• Request deletion of your personal information
• Opt-out of sale of personal information (we don't sell your data)
• Non-discrimination for exercising your privacy rights

7.3 How to Exercise Your Rights

To exercise any of these rights, contact us at privacy@friendsysk.com. We will respond within 30 days.

8. Google API Services User Data Policy Compliance

FYSK's use and transfer of information received from Google APIs adheres to Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We only request the minimum Gmail API scopes necessary for contact organization
• Gmail data is used solely to provide contact organization features
• Gmail data is not used for advertising or marketing purposes
• Gmail data is not sold or transferred to third parties (except as required for service operation)
• Human access to Gmail data is strictly limited to debugging and security purposes

9. Data Deletion and Account Closure

You can delete your account and all associated data at any time by:

1. Logging into your FYSK account
2. Going to Settings → Account → Delete Account
3. Or emailing us at support@friendsysk.com

Upon deletion, we will permanently remove your data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, security).

10. Children's Privacy

FYSK is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will delete it immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including:

• Standard Contractual Clauses approved by the European Commission
• Adequate data protection frameworks
• Your explicit consent where required

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending you an email notification (for significant changes)

Your continued use of FYSK after changes become effective constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us:

14. Data Protection Officer

For EU/EEA users, if you have concerns about our data handling practices, you have the right to lodge a complaint with your local data protection authority.