Privacy Policy

Last Updated: September 26, 2026

1. Introduction

Welcome to GSync.

GSync is an audit engagement and task management platform operated by GS Software Solutions. GSync is designed to help organizations and their users manage audit engagements, tasks, communications, supporting documents and related workflows.

This Privacy Policy explains how GSync collects, uses, stores, protects and processes information when you use the GSync application and related services.

By using GSync, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

Depending on how you use GSync, we may collect and process the following types of information:

2.1 Account Information

• Name
• Email address
• Username or account identifier
• Organization or engagement information
• Authentication and session information

2.2 Engagement and Task Information

Users may create, submit or manage information within GSync relating to audit engagements and tasks.

This may include task information, engagement details, comments, statuses, due dates, assignments and other information entered by authorized users.

2.3 Supporting Documents and Attachments

GSync may process files and attachments uploaded by authorized users in connection with audit engagements and tasks.

3. Email Account Access and Integrations

GSync provides optional email integrations that allow users to connect their own supported email accounts to perform email-related functionality within GSync.

3.1 Connected Email Account Data

When a user chooses to connect a supported email account, GSync may access only the information and functionality permitted by the authorization granted by the user.

Depending on the email provider and permissions granted, this may include information required to identify the connected email account and perform authorized email-related functions such as sending emails or searching for recipients.

GSync does not use connected email data for advertising or sell connected email data to third parties.

3.2 Purpose of Email Account Access

Connected email accounts are used to provide email functionality requested by the user, including engagement-related email communication and other functionality explicitly provided within GSync.

Email account data is not used for purposes unrelated to providing or improving the requested GSync functionality.

3.3 Email Account Authorization

When connecting a supported email account, the user is redirected to the relevant email provider's authorization interface.

The user can review the permissions requested by GSync before granting access.

The user may decline the authorization request. If authorization is not granted, functionality requiring that authorization may not be available.

3.4 Disconnecting Email Accounts

Users may disconnect their connected email account through the GSync application when the disconnect functionality is available.

Users may also manage or revoke GSync's access through the relevant third-party email provider's account settings.

4. How We Use Information

GSync may use information for the following purposes:

• To provide and operate the GSync application.
• To authenticate users and maintain secure sessions.
• To manage audit engagements and tasks.
• To facilitate authorized communication between engagement participants.
• To provide email integration features requested by users.
• To provide notifications and reminders.
• To maintain application security and prevent unauthorized access.
• To troubleshoot errors and improve application reliability.
• To provide customer and technical support.

5. OAuth Tokens and Authentication Data

When a user connects a supported email account, GSync may receive OAuth access tokens and refresh tokens from the email provider.

These tokens are used to maintain the authorized connection and obtain access permitted by the user.

OAuth tokens are stored and processed using security measures designed to protect them against unauthorized access.

GSync does not request or store the user's email account password.

6. Sharing of Information

GSync does not sell, rent or trade personal information for advertising purposes.

Information may be processed by service providers that support the operation of GSync, such as infrastructure, database, cloud storage, email delivery and other technology providers.

Such providers may process information only as necessary to provide their services to GSync and are expected to maintain appropriate safeguards.

Information may also be disclosed where required by applicable law, regulation, legal process or governmental request.

7. Google API Services

When a user chooses to connect a Gmail account, GSync uses Google APIs and Google's OAuth authorization services to provide the requested email functionality.

GSync's use and transfer of information received from Google APIs will comply with applicable Google API Services User Data Policy requirements, including Limited Use requirements where applicable.

Users can review Google's privacy practices and manage third-party application access through their Google Account.

8. Data Security

GSync takes reasonable technical and organizational measures to protect information processed through the application.

Security measures may include access controls, authentication, protected application infrastructure, secure communications and controlled access to stored information.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

9. Data Retention

GSync retains information for as long as reasonably necessary to provide the services, maintain business and security records, comply with applicable legal obligations, resolve disputes and enforce agreements.

When information is no longer required, GSync may delete, anonymize or otherwise securely dispose of it, subject to applicable legal and operational requirements.

10. Connected Account Disconnection

Users can disconnect a connected email account from GSync using the available account-management functionality.

Disconnecting an email account prevents GSync from continuing to use the authorization associated with that connection, subject to any processing required for previously completed activities or legal obligations.

Users can also revoke GSync's access from the relevant third-party provider's account settings.

11. User Rights and Choices

Depending on applicable law, users may have rights concerning their personal information, including the ability to:

• Request access to personal information.
• Request correction of inaccurate information.
• Request deletion of information where legally applicable.
• Disconnect supported email accounts.
• Contact GSync regarding privacy questions or concerns.

12. Children's Privacy

GSync is intended for business and professional use and is not directed toward children.

GSync does not knowingly collect personal information from children where such collection is prohibited by applicable law.

13. Third-Party Services

GSync may integrate with third-party services to provide functionality such as authentication, email, cloud storage, infrastructure and other application services.

Third-party services operate under their own terms and privacy policies. Users are encouraged to review the privacy practices of third-party services they choose to connect to GSync.

14. Changes to This Privacy Policy

GSync may update this Privacy Policy from time to time to reflect changes in the application, services, legal requirements or privacy practices.

When changes are made, the updated policy will be published on this page with a revised "Last Updated" date.

15. Contact Us

If you have questions, concerns or requests regarding this Privacy Policy or the handling of your information, please contact GS Software Solutions.

Legal Entity: GS Software Solutions

Email: support@gsync.in

Website: https://gsync.in