Privacy Policy

1. Organization Overview

ClientCoreTech ("CCT", "we", "us", or "our") is a product-led operational software company headquartered in Coimbatore, Tamil Nadu, India. This Privacy Policy describes how we handle information in connection with our website, products (including EOMS and TaskSpring Rise), and operational customer engagements.

2. Client Engineering Data Protection

We build operational software that processes mission-critical technical documents, including engineering drawing blueprints (PDFs), Bar Bending Schedules (.xlsx), and client transmittals. All proprietary engineering documents uploaded to or processed by CCT software:

• Are stored in encrypted, versioned private AWS S3 repositories.
• Are processed in isolated worker runtime instances (Celery workers).
• Proprietary engineering documents are not sold or disclosed to unauthorized third parties. Where explicitly authorized by the client, documents may be transmitted to designated recipients as part of operational workflows. Service providers may process data as necessary to deliver the requested service, subject to applicable security and confidentiality safeguards. Google user data is not used to train generalized AI or machine-learning models.

3. Information We Collect

When you contact us or inquire about our software products, we may collect:

• Name, professional work email address, and phone number.
• Company name, operational role, and operational workflow requirements.
• Basic server logging information (IP address, browser type) for security audits.

4. Communications & Data Storage

Transmittal modules (such as those in EOMS) integrate with enterprise Amazon SES using domain authentication (DKIM, SPF, DMARC) and background IMAP sent synchronization to ensure complete transmittal auditability. We do not retain copies of correspondence beyond what is explicitly required for system audit trails.

5. Third-Party Integrations & Google API User Data

As a software development and technical solutions provider, ClientCoreTech may integrate third-party APIs—including Google Workspace and Gmail APIs—into custom client systems based on specific client operational requirements.

For deployments utilizing email transmittal integrations (such as the EOMS client system):

• An authorized client email account (such as a Google/Gmail account) may be connected via OAuth with explicit consent granted by the account owner.
• Access is strictly limited to authorized transaction functionalities (such as the gmail.send scope) solely to transmit project documentation, transmittal notices, and PDF attachments on behalf of the client.
• For Gmail integrations configured only for email sending, ClientCoreTech does not access or process inbox messages, contacts, or unrelated email data.
• ClientCoreTech does not sell Google user data or share it with advertising platforms, data brokers, or other third parties for advertising or unrelated purposes. Any sharing or transfer of Google user data is limited to providing the user-authorized functionality described in this policy, including sending emails to designated recipients and processing by service providers where necessary. Google user data is not used to train or improve generalized AI or machine-learning models.
• ClientCoreTech's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Sharing and Disclosure of Google User Data

ClientCoreTech processes Google user data only to provide the functionality explicitly authorized by the user. For EOMS Gmail integrations configured for email sending, the authorized Gmail account is used to send project transmittal emails and attachments to the recipients specified by the authorized user.

Who receives or processes this data:

• Intended email recipients: The email content and attachments are transmitted to the recipients selected by the authorized user. Those recipients receive the information as part of the requested email-sending functionality.
• Google: Google's OAuth and Gmail API services process authentication requests and email-sending requests to provide the authorized functionality.
• Infrastructure service providers: Service providers used to host and operate EOMS may process data as necessary to provide the service, subject to applicable security and confidentiality safeguards.
• Legal or security disclosures: Information may be disclosed where required by applicable law or where necessary to address security incidents, fraud, or abuse.

ClientCoreTech does not sell Google user data or share it with advertising platforms, data brokers, or other third parties for advertising or unrelated purposes. Google user data is not used to train or improve generalized AI or machine-learning models.

ClientCoreTech's access to and use of Google API data adheres to the Google API Services User Data Policy, including its Limited Use requirements.

7. Inquiries & Contact

If you have questions regarding data governance or our privacy practices, contact us directly: