Privacy Notice
Effective date: 2026-08-01
This Privacy Notice explains how Urixoft collects, uses, stores, and secures personal information when you use the Workspace platform, including when you sign up with email or third-party identity providers.
Information we collect
- Account details such as name, email address, and password (stored as a secure hash).
- Consent records including the exact timestamp, IP address, and policy version when you check the terms agreement box or click a social sign-in button.
- Technical data such as browser user agent for fraud prevention and audit trails.
Social login data (Google, Apple, and Facebook)
When you choose Continue with Google, Sign in with Apple, or a Facebook sign-in option, we receive profile information from that provider's API. Depending on the provider and your choices, this may include your name, email address, profile picture URL, and a provider user identifier. We use this data only to create or authenticate your Workspace account, pre-fill your profile where you have granted permission, and prevent duplicate accounts and detect abuse.
Sign in with Apple may share your name only on your first sign-in. You may choose to hide your email address; in that case Apple provides a unique private relay address that forwards to your Apple ID email. We store the email address (or relay address) and Apple user identifier needed to authenticate your account on future sign-ins.
We log the exact time and IP address when you initiate social sign-in, before redirecting to the provider. OAuth tokens from Google, Apple, or Facebook are used transiently to complete authentication and are not stored in plain text. Provider identifiers may be stored to link your account on future sign-ins.
Each provider's use of your data is also governed by its own privacy policy: Google, Apple, and Facebook.
How we secure your data
- Passwords are hashed with industry-standard algorithms; we never store plain-text passwords.
- Data in transit is protected with TLS (HTTPS).
- Access to production systems is restricted and audited.
- Consent and authentication events are retained for compliance and security investigations.
Data retention
We retain account and consent records for as long as your account is active and as required by law or legitimate business needs. You may request deletion of your account by contacting support.
Third-party services
We use Google reCAPTCHA to protect signup and login forms. Google's use of data is governed by the Google Privacy Policy and Terms of Service.
Contact
Privacy questions can be sent to privacy@urixoft.com.