Legal
Privacy Policy
Last updated 27 July 2026
Who we are
The Software Society provides a business management platform covering CRM, outreach, websites, SEO, scheduling and related tooling. This policy explains what we collect, why, and what we do with it. If anything here is unclear, email privacy@thesoftwaresociety.io.
Information we collect
- Account information — name, email address, organisation, and authentication credentials.
- Content you create — contacts, tasks, projects, websites, campaigns, and anything else you enter into the platform.
- Third-party data you connect — including Google account data, described in detail below.
- Usage and technical data — log data, device and browser information, and IP address, used to operate and secure the service.
Google user data
Connecting a Google account is always optional and always initiated by you. We request the narrowest scopes that make each feature work, and we ask for them only when you turn that feature on — never all at once at signup.
| What we access | Why |
|---|---|
| Basic profile and email address | To identify which Google account you connected, so you can tell multiple accounts apart and disconnect the right one. |
| Google Calendar — calendar list (read only) | To show you which of your calendars can receive bookings so you can choose one. |
| Google Calendar — free/busy (read only) | To avoid offering a meeting slot that conflicts with something already on your calendar. |
| Google Calendar — events | To create the meetings booked through your scheduling pages on your calendar, and to send the invitations. |
| Google Search Console (read only) | To display impressions, clicks, click-through rate and average position for a property you already own. We never modify Search Console. |
| Google Analytics (read only) | To list your GA4 properties and display sessions, users and pageviews for the property you select. We never modify Analytics. |
Limited Use disclosure
The Software Society's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, we do not use Google user data to serve advertising, we do not sell it, we do not transfer it to third parties except as needed to provide the features you enabled or where required by law, and we do not allow humans to read it except where you have given explicit consent for specific items, where it is necessary for security purposes or to comply with applicable law, or where the data has been aggregated and anonymised.
We do not use Google user data to develop, improve, or train generalised artificial intelligence or machine learning models.
Storage and revocation
Google access and refresh tokens are encrypted at rest and are never exposed to your browser or to other customers. When you disconnect a Google account in the platform, we revoke the grant with Google and delete our copy of the tokens. You can also revoke access at any time from your Google account permissions page.
How we use your information
We use your information to provide and maintain the platform, to deliver the specific features you enable, to secure accounts and prevent abuse, to provide support, and to communicate with you about the service. We do not sell your personal information.
Sharing
We share data with infrastructure and service providers who process it on our behalf under contract — hosting, database, email delivery, payment processing, and telephony. We also share data with a third party where you have explicitly connected that integration. We may disclose information where required by law.
Retention and deletion
We retain your data for as long as your account is active. You can delete individual records at any time from within the platform. When an account is closed, we delete or anonymise its data within 90 days, except where we are required to retain records for legal or accounting purposes. To request deletion, email privacy@thesoftwaresociety.io.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. Contact us at privacy@thesoftwaresociety.io and we will respond within the timeframe required by applicable law.
Security
Data is encrypted in transit and third-party credentials are encrypted at rest. Access to production systems is restricted and logged. No system is perfectly secure, but we treat customer credentials as the most sensitive data we hold and design accordingly.
Changes to this policy
If we make material changes we will update the date at the top of this page and, where appropriate, notify you in the platform or by email.
Contact
The Software Society — privacy@thesoftwaresociety.io