1. Introduction

This Privacy Policy explains how Baines OS ("we", "our", "the platform") collects, uses, and protects information. Baines OS is an internal enterprise platform intended solely for use by our organization's employees and authorized personnel.

2. Information We Collect

As an enterprise application, we collect and process information necessary for business operations, including:

• User Identity Information: Name, email address, role, and department information provided via your organization account (e.g., Google Workspace or Microsoft Entra ID).
• Usage Data: Logs of actions performed within the system for audit, security, and performance monitoring purposes.
• Business Data: Information entered into the system as part of your work duties (e.g., leave requests, CRM entries).

3. How We Use Your Information

We use the collected information for the following purposes:

• Authentication & Access Control: Verifying your identity and ensuring you have the correct permissions to access specific modules.
• Operational Processes: Facilitating business workflows such as leave approval, staff scheduling, and customer management.
• Security & Auditing: Monitoring system access to prevent unauthorized use and investigating security incidents.

4. Data Sharing & Third Parties

Baines OS is an internal system. We do not sell, trade, or share your personal data with external third parties for marketing purposes. Data may be shared with:

• Service Providers: Cloud hosting and infrastructure providers that support the platform (e.g., database hosting, authentication services like Clerk or Google Cloud).
• Legal Requirements: If required by law or to protect the rights/safety of our organization.

5. Google User Data

If you sign in or integrate via Google services:

• We only access information defined in the requested scopes (e.g., public profile details, calendar for scheduling if authorized).
• We do not use Google user data for advertising purposes.

6. Data Security

We implement robust security measures, including encryption, access controls, and regular audits, to protect data against unauthorized access, alteration, or destruction.

7. Contact Us

For questions regarding this privacy policy or data practices, please contact the IT Department or your system administrator.