Truewind Privacy Policy

Date of Last Update: June 2, 2026

At Truewind, we take privacy seriously. This Privacy Policy explains how we collect, use, store, disclose, and protect personal data when you visit our website or use our products, services, and applications, including Workpaper Agent.

Scope of this Privacy Policy

This Privacy Policy applies to personal data we collect through our website, product, and related services. It also describes how we handle Google user data, Slack data, and Microsoft Teams data when a user chooses to connect those services to Truewind.

Information We Collect

We may collect:

Contact and account information such as name, work email address, company name, and login credentials.
Billing and transaction information needed to provide the service.
Device, usage, and diagnostic information such as IP address, browser type, pages viewed, referring URLs, and product interaction data.
Customer content and files that users upload, import, create, or export through the service.
Communications integration data from connected services, such as Slack and Microsoft Teams messages, thread metadata, sender information, and attachments used in Workpaper Agent workflows.
Support and communications data when you contact us.

Google Drive Data We Collect

When a user chooses to connect Google Drive to Truewind for Workpaper Agent, we may collect and process:

Google account identifiers such as email address and Google account subject identifier.
Google Drive file and folder metadata needed to show the user available files and folders, including names, identifiers, paths, MIME types, timestamps, and file sizes.
The contents of a Google Drive file that the user explicitly selects to import into Workpaper Agent.
Metadata and file contents needed to create, update, or export a workpaper file to a Google Drive folder the user explicitly selects.
OAuth access tokens and refresh tokens required to maintain the authorized connection. These tokens are stored in encrypted form.

Slack Data We Collect

When a user or organization chooses to connect Slack to Truewind for Workpaper Agent, we may collect and process:

Slack workspace identifiers, workspace names, channel identifiers, channel names, thread identifiers, message timestamps, and message permalinks needed to link Slack threads to workpaper Threads.
Slack user identifiers, display names, and email addresses needed to identify message senders, resolve authorized users, and show sender context in Truewind.
Messages sent to the Truewind Slack app, app mentions, direct messages with the app, and messages in linked Slack threads or channels that are needed to provide the requested Workpaper Agent workflow.
Slack file metadata and file contents for files shared with the Truewind Slack app or selected for a linked workpaper workflow.
OAuth access tokens and related authorization metadata required to maintain the authorized Slack connection. These tokens are stored in encrypted form.

Slack OAuth Scopes We Request

Truewind requests Slack OAuth scopes only to support the Slack features customers enable:

app_mentions:read to receive app mentions and route workpaper requests to Truewind.
channels:history to read messages in authorized public channels when needed to process linked threads and workpaper requests.
channels:read to resolve public channel metadata, such as channel names, for linked Slack threads.
chat:write to post replies, confirmations, and workpaper workflow updates in Slack.
files:read to read files shared with the Truewind Slack app or selected for a workpaper workflow.
files:write to upload generated workpaper artifacts or reply attachments back to Slack when requested.
groups:read to resolve private channel metadata for channels where the Truewind Slack app is authorized.
im:history and im:read to receive and process direct messages with the Truewind Slack app.
mpim:read to resolve multi-person direct message metadata where the Truewind Slack app is authorized.
users:read and users:read.email to identify Slack users and match them to authorized Truewind users.

How We Use Personal Data

We use personal data to:

Provide, operate, maintain, secure, and improve the service.
Authenticate users and manage accounts.
Process transactions, respond to requests, and provide support.
Analyze product performance and troubleshoot issues.
Comply with legal obligations and enforce our terms.
Send service-related communications.

We may also use website and marketing data to understand interest in our services and improve our website, campaigns, and communications.

How We Use Google Drive Data

We use Google Drive data only to support user-initiated product features in Workpaper Agent, including:

Identifying the Google account that the user connected.
Allowing the user to browse files and folders within the Google Drive location the user configured.
Importing a file the user explicitly selects into a workpaper workflow.
Creating folders as needed and creating or updating exported workpaper files in the Google Drive destination the user explicitly selects.
Maintaining the authorized Google Drive connection so the feature continues to work.

How We Use Slack Data

We use Slack data only to support user-initiated product features in Workpaper Agent, including:

Linking Slack threads to workpaper Threads in Truewind.
Receiving and responding to workpaper creation requests, app mentions, and direct messages addressed to the Truewind Slack app.
Displaying linked Slack conversation context, sender information, and attachments inside Truewind.
Importing Slack-shared files into workpaper workflows when users provide or select those files.
Sending replies, confirmations, status updates, and requested file attachments back to the relevant Slack conversation.
Maintaining the authorized Slack connection so the feature continues to work.

Google User Data Restrictions

Truewind does not use Google user data obtained through Google Workspace or Google Drive APIs to:

Sell Google user data.
Serve, target, or measure advertisements.
Build advertising profiles.
Train generalized or non-customer-specific artificial intelligence or machine learning models.
Use Google user data for any purpose unrelated to the user-facing features the customer requested.

Slack Data Restrictions

Truewind does not use Slack data to:

Sell Slack data.
Serve, target, or measure advertisements.
Build advertising profiles.
Train generalized or non-customer-specific artificial intelligence or machine learning models.
Use Slack data for any purpose unrelated to the user-facing Slack and Workpaper Agent features the customer requested.

Microsoft Teams Data We Collect

When a user or organization chooses to connect Microsoft Teams to Truewind for Workpaper Agent, we may collect and process Microsoft Teams and Microsoft Graph data, including:

Microsoft tenant, team, channel, chat, conversation, and thread identifiers needed to connect Teams conversations to workpaper Threads.
Team and channel metadata, such as display names, needed to identify and display linked Teams conversations.
Microsoft account identifiers, names, and email addresses needed to identify installing users, message senders, and authorized users.
Microsoft user profile photos needed to display Teams message senders in linked workpaper Threads.
Teams channel messages, replies, bot messages, conversation references, and related message metadata needed to process linked workpaper conversations and route replies.
Teams, SharePoint, or OneDrive file metadata and file contents for files shared in linked Teams conversations, sent to the Truewind Teams app, or attached to Truewind replies.
OAuth access tokens, refresh tokens, granted scopes, and related authorization metadata required to maintain the authorized Microsoft Teams connection. These tokens are stored in encrypted form.

Microsoft Teams OAuth Scopes We Request

Truewind requests Microsoft OAuth scopes only to support the Microsoft Teams features customers enable:

openid, profile, and email to authenticate the installing user and receive basic profile information.
offline_access to maintain the authorized Microsoft Teams connection with refresh tokens.
User.Read to identify the connected Microsoft user.
ProfilePhoto.Read.All to read Microsoft user profile photos for Teams sender display in linked workpaper Threads.
Channel.ReadBasic.All to read basic team and channel metadata, such as channel names, needed to identify linked Teams conversations.
ChannelMessage.Read.All to read Teams channel messages and replies needed to process linked workpaper Threads, inbound requests, and attachments.
ChannelMessage.Send to send replies, confirmations, and workpaper workflow updates through the Truewind Teams app.
Files.Read.All to read files shared in linked Teams conversations or selected for workpaper workflows.
Files.ReadWrite.All to upload reply attachments or generated workpaper artifacts to the relevant Teams channel file location when a user requests an attachment reply.

How We Use Microsoft Teams Data

We use Microsoft Teams data only to support user-initiated product features in Workpaper Agent, including:

Linking Microsoft Teams conversations to workpaper Threads in Truewind.
Receiving and responding to Teams messages, mentions, and workpaper creation requests addressed to the Truewind Teams app.
Displaying linked Teams conversation context, sender information, sender profile photos, and attachments inside Truewind.
Importing Teams, SharePoint, or OneDrive files into workpaper workflows when users provide or select those files.
Uploading requested reply attachments and generated workpaper artifacts to Teams-backed file storage and sending links or replies in the relevant Teams conversation.
Maintaining the authorized Microsoft Teams connection so the feature continues to work.

Microsoft Teams Data Restrictions

Truewind does not use Microsoft Teams or Microsoft Graph data to:

Sell Microsoft Teams data.
Serve, target, or measure advertisements.
Build advertising profiles.
Train generalized or non-customer-specific artificial intelligence or machine learning models.
Use Microsoft Teams data for any purpose unrelated to the user-facing Microsoft Teams and Workpaper Agent features the customer requested.

We may share personal data with:

Service providers and subprocessors that help us host, operate, secure, support, and maintain the service.
Professional advisors, auditors, insurers, and legal representatives when necessary.
Government authorities or other third parties when required by law, regulation, legal process, or to protect rights, safety, and security.
A successor entity in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets.

We do not sell personal data. We do not share Google user data, Slack data, or Microsoft Teams data except as needed to provide the requested service, comply with law, or protect rights, safety, and security.

Data Retention

We retain personal data for as long as needed to provide the service, comply with legal obligations, resolve disputes, enforce agreements, and maintain appropriate business records. We retain Google Drive, Slack, and Microsoft Teams connection tokens and related metadata only as long as needed to maintain the authorized integration or as otherwise required by law or contract. We may retain de-identified or aggregated information that does not identify you.

Security

We use administrative, technical, and organizational safeguards designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. For Google Drive, Slack, and Microsoft Teams integrations, OAuth credentials are stored in encrypted form. No security measure is perfect, and we cannot guarantee absolute security.

Cookies and Analytics

We use cookies and similar technologies to operate our website, understand website usage, remember preferences, and measure the effectiveness of our marketing and website experience. You can control cookies through your browser settings. Disabling cookies may affect site functionality.

Your Choices and Rights

Depending on where you live, you may have rights to access, correct, delete, or restrict certain personal data, or to object to certain processing. You may also disconnect Google Drive, Slack, and Microsoft Teams integrations from within the product. To make a privacy request, contact us at support@trytruewind.com.

Children's Privacy

Our services are not directed to children, and we do not knowingly collect personal data from children.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated version on this page and may provide additional notice when required.

Contact Information

If you have questions about this Privacy Policy or our data practices, contact us at support@trytruewind.com.