Executive Tracking 360EPSE Enterprises LLC

Operated by EPSE Enterprises LLC, a separate business from the nonprofit EPSE Education Protection Safety Empowerment.

Privacy policy

Your information and your choices

This policy describes how EPSE Enterprises LLC processes information for Executive Tracking 360, including its optional Gmail, Google Calendar and Zoom connections.

Effective October 21, 2026

Who is responsible

EPSE Enterprises LLC operates Executive Tracking 360. Contact executivetracking@epse2021.org about privacy, access, correction, export or deletion requests.

Information we process

Google connections: Gmail and Google Calendar

Connecting Google is optional. You authorize Gmail and Google Calendar separately from Connections in your private tracker. Google identifies the account you authorize; it does not replace your tracker sign-in. We receive your Google account identity information to identify and label the connection, and store the authorization tokens needed to maintain it. Do not give us your Google password.

What we access

Purpose, storage and sharing

We use these previews to help you review commitments, deadlines and follow-ups and create work records that you approve. Refreshing a source does not automatically approve a task or send an email. Google data is processed through the tracker’s hosting infrastructure and cached under your signed-in account. OAuth tokens are encrypted before storage; cached previews are not separately encrypted by application code. See Security below for the distinction between application and hosting protections.

If you save information into a shared team workspace, authorized team members can see those saved records. Merely connecting Google does not give other clients your Google credentials or your account’s preview cache. If the optional live AI assistant is enabled and you submit a request, Google preview excerpts may be included in information sent to OpenAI, as described under Optional AI assistance below. This is processing for your requested response; the tracker does not use Google data to train general-purpose AI models.

Limits on use

Google user data is used for the disclosed features you choose, not sold to data brokers, used for advertising, or used to make lending or credit decisions. Staff access to specific Google content is limited to your affirmative permission for support, necessary security investigation, or legal requirements. These limits also apply to information derived from Google data. Our handling of Google data is subject to the Google API Services User Data Policy, including its Limited Use requirements. Publishing this notice does not mean Google has approved or certified the integration.

Disconnecting and deleting Google data

In tracker Connections, choose Disconnect for Gmail or Google Calendar to remove that connection’s saved tokens and cached previews. The tracker also attempts to revoke Google authorization. You can review or remove access in your Google Account connections. Because these integrations use the same Google application, revoking its Google grant can require reconnecting both services. Removing access at Google does not itself erase copies already saved in the tracker.

Cached previews have no automatic age-based expiry: they remain until replaced by refresh, disconnected or deleted. Saved tasks, notes and other work are separate from the connection cache. To request deletion of those records or account data, email executivetracking@epse2021.org. We verify the requester and scope to protect other users’ data. The retention and backup limitations below apply to Google data too; we do not promise immediate erasure from hosting backups.

What the Zoom connection reads

The connection reads your Zoom profile to identify the authorized account and lists up to 10 cloud-recording summaries from the preceding 28 days. Cached summaries include a recording/meeting identifier, topic, date, share link when available, and whether Zoom lists a transcript. This integration does not download recording media or transcript contents, join or record meetings, or change or delete Zoom records.

How information is used

We use information to authenticate users, provide private workspaces, show authorized sources, create user-reviewed work records, provide reporting, administer billing and respond to support requests. A source refresh does not automatically approve tasks or send emails.

Optional AI assistance

When the live AI assistant is enabled and you submit a request, the application can send your question, up to 100 workspace items and excerpts from up to 40 cached connected sources to OpenAI to prepare a response. The request uses the API’s store:false option; this is not a promise of zero provider retention. Review your content before using this feature and do not include information you are not authorized to share. Zoom recording metadata may be included if it is present in the selected cached sources. AI suggestions require human review.

Who may receive information

The service uses hosting and authentication services provided through Sites/ChatGPT and infrastructure running on Cloudflare, Stripe for billing, Microsoft for support email, and the providers of services you choose to connect. OpenAI receives content when the live AI feature described above is used. Support personnel may process information you provide to resolve requests. Shared team workspaces make intentionally shared records available to authorized team members; separately billed private workspaces retain their own content boundaries. We may also disclose information where required by law or to address a security incident.

Security

The application uses HTTPS, authenticated access and user-scoped records. OAuth access and refresh tokens are encrypted before database storage. Account labels and cached source summaries are stored as structured text in the application database and are not separately encrypted by application code. Cloudflare documents automatic encryption at rest for D1 database objects and metadata. No system can guarantee absolute security. Never send passwords, authorization codes or API secrets to support.

Retention and disconnection

Cached connected-source previews remain until refreshed, disconnected or deleted; there is no automatic age-based purge for that cache in the current implementation. Disconnecting in the tracker removes its saved connection credentials and cached previews and attempts provider revocation. Tasks and meeting notes you previously saved remain until you delete them or request account-data deletion. Removing the app only in Zoom stops Zoom authorization; it does not guarantee immediate removal of tracker caches or independently saved work. Use the tracker’s Disconnect control and contact support if you need deletion assistance.

After verifying your identity and request scope, we process deletion requests and explain any records retained for billing, legal obligations, shared-workspace responsibilities or resolving disputes. Minimal identifiers and a deletion case receipt may be retained to prevent deleted account data from being recreated. Backup and recovery copies may remain under the hosting provider’s retention processes. Deletion from the working database does not mean immediate removal from every backup; we do not promise an exact backup-expiry date.

Your rights and requests

Depending on the laws that apply to you, you may have rights to access, correct, delete or export your information, restrict or object to processing, withdraw consent, or complain to a relevant authority. Contact executivetracking@epse2021.org from your account email and describe the request. We may ask for reasonable identity verification; do not send identity documents unless a secure method has been agreed. Withdrawing authorization does not undo earlier lawful processing.

Changes

Material changes will be communicated through the service or an appropriate account communication.