Privacy Policy

This Privacy Policy applies to the Grezorea Team Chat mobile application (the "App"), the website at team.grezorea.com (the "Site"), and the related services collectively (the "Service") provided by Grezorea. The Service is a private internal communication platform for Grezorea employees, contractors, and other authorized personnel only. By installing or accessing the Service, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy.

We collect and store only the information reasonably necessary to operate, maintain, and secure the Service for its authorized users. This includes: - Account information: your full name, work email address, profile photo / avatar, and any role or department information your administrator provides. - Communications data: messages you send or receive in chats, files, images, documents and other attachments shared through the Service, delivery and read receipts, reactions, threads, and message history. - Voice and video calls: call start / end times, duration, participants, and call recordings where a recording is explicitly started by a participant in a call. - Device and usage information: approximate presence / online status, push notification token (if you enable notifications), basic device information (operating system version, app version, mobile network information where required for delivery). - Support records: if you contact support, the record of that conversation and any details needed to resolve your issue.

We use the information above solely for Grezorea internal business purposes, specifically: - To provide, maintain, and improve the core chat, calling, and push-notification features of the Service. - To authenticate users and secure access to the Service. - To deliver push notifications for new messages, mentions, or incoming calls (only if you have granted the notification permission). - To operate the microphone / camera during calls when you explicitly join a voice or video call. - To investigate security incidents, support requests, or abuse reports. - To comply with any applicable laws, regulations, or enforceable legal process.

We do not sell, rent, lease, or share your personal data with external advertisers or third parties for their own marketing purposes. We may disclose information only in the following limited circumstances: - With your explicit consent. - With authorized Grezorea administrators who manage the workspace, for the purposes of support, security, and compliance. - With service providers and hosting partners (currently Supabase as infrastructure provider) who process data strictly on our behalf and are bound by contractual confidentiality and security obligations. - Where required by law, regulation, court order, or other enforceable governmental request, after taking reasonable steps to notify the affected user(s) where lawful and appropriate to do so. - To establish, exercise, or defend legal claims.

If you install the Grezorea Team Chat Android app from the Google Play Store, the App may request the following permissions, each only when and if you choose to use the related feature: - Camera (android.permission.CAMERA): used only during video calls that you explicitly join and when you take a photo to attach to a chat. - Record audio / microphone (android.permission.RECORD_AUDIO with foregroundServiceType microphone): used only during voice or video calls that you explicitly join. - Modify audio settings (android.permission.MODIFY_AUDIO_SETTINGS): used to manage speakerphone, bluetooth headset, and mute state during calls. - Post notifications (android.permission.POST_NOTIFICATIONS): used to deliver alerts for new messages, mentions, and incoming calls. You can revoke this at any time from your device Settings > Apps > Grezorea Team > Notifications. - Vibration (android.permission.VIBRATE): used for haptic feedback with notifications when enabled on your device. - Use full screen intent (android.permission.USE_FULL_SCREEN_INTENT): used to surface an incoming-call screen when the device is locked. No permission is used for purposes unrelated to the features described above. You can revoke any permission at any time from your device's Android Settings, though some features may then be limited.

Security: Data in transit between your device and our servers is protected using industry-standard Transport Layer Security (TLS). Data at rest is protected by encryption controls on our hosted infrastructure. Access to data is restricted to authorized accounts, and workspace data is logically separated from other organizations using the same underlying platform. Retention: We retain account, message, file, and call-metadata information for as long as your workspace account remains active, unless your workspace administrator configures a shorter retention period or a specific record is subject to a longer retention requirement under law. When an account is deactivated or data is explicitly requested for deletion, we will delete or anonymize the associated data within a reasonable timeframe, subject to any legal hold or record-keeping obligation.

Subject to applicable law, you may have the right to request access to, correction of, or erasure of personal data that the Service holds about you, or to restrict or object to certain processing. Because this is a Grezorea-managed workspace, please direct all such requests — including questions about your data, requests to export your data, or requests to delete your account — to your Grezorea workspace administrator in the first instance. Your administrator is responsible for responding to your request and, where needed, escalating to Grezorea engineering. If you believe a request has not been adequately addressed, you may contact Grezorea compliance at the contact below.

The Service is not directed to, and is not licensed for use by, children under the age of 16 (or the applicable minimum age in your jurisdiction). We do not knowingly collect or process personal data from children. If you believe a child under the minimum age has been granted access to the Service, please notify your workspace administrator immediately.

Data processed through the Service may be stored and processed on servers located outside the country in which you are based, including in infrastructure operated by our hosting partners. By using the Service you consent to any such transfer, which is made subject to appropriate contractual, technical, and organizational safeguards designed to protect your personal data in accordance with applicable law.

We may update this Privacy Policy from time to time to reflect changes to the Service, applicable law, or our practices. When we make material changes, we will post the updated version on the Site with a revised "Last updated" date and, where appropriate, notify users through the App or by other reasonable means. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

For questions, concerns, or requests regarding this Privacy Policy, contact your workspace administrator or write to Grezorea Product Compliance at compliance@grezorea.com with the subject line "Grezorea Team Chat — Privacy".