Legal & Compliance

Privacy Policy

Last updated: September 15, 2026 · Maverick Ops Hub

Maverick Ops Hub ("we", "our", or "the platform") is an internal operations and requirements gathering system designed to facilitate project intake, scope verification, task delivery, personnel workspaces, and team meeting scheduling. We take your privacy and data protection seriously. This Privacy Policy describes how we collect, use, store, and protect information when you use our platform and connect third-party integrations such as Google Calendar.

1. Information We Collect

We collect information necessary to operate the platform and deliver collaborative features:

Account Information: Name, work email address, encrypted password hash, assigned organization role, and employee identifier.
Operational & Project Data: Requirements registers, scope items, deliverables, acceptance criteria, Kanban cards, task assignments, and time logs.
System Logs & Audit Records: Log-in timestamps, IP addresses, user agents, route actions, and system activity logs recorded for operational integrity and security.

2. Google Account & Google Calendar Data

Users have the option to connect their Google account to enable bidirectional synchronization with their Google Calendar. When you connect your Google account, our platform requests the following OAuth 2.0 scopes:

openid, https://www.googleapis.com/auth/userinfo.email, https://www.googleapis.com/auth/userinfo.profile: To verify your identity, display your connected Google email, and associate your account.
https://www.googleapis.com/auth/calendar and https://www.googleapis.com/auth/calendar.events: To read your scheduled events, identify your busy time slots, and create or update meeting bookings requested through the platform.

Google API Limited Use Disclosure Maverick Ops Hub's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3. How We Use Google Calendar Data

Your Google Calendar data is processed strictly for the following functional purposes:

Availability & Conflict Detection: Checking free and busy time intervals so colleagues can schedule internal meetings with you without double-booking.
Two-Way Synchronization: Pushing meetings scheduled in Maverick Ops Hub to your primary Google Calendar and pulling external Google events into your Maverick schedule to keep both views accurate.
Colleague Privacy: When colleagues view your calendar to book a slot, external personal Google events are displayed simply as "Busy" to protect the privacy of your personal appointments.

No Commercialization: We do not sell, rent, or trade your Google user data. We do not use your Google data to serve advertisements, nor do we transfer it to data brokers or use it to train generalized machine learning models.

4. Security & Token Encryption

We implement robust security controls to ensure data integrity:

Encrypted Token Storage: All OAuth tokens (access tokens and refresh tokens) received from Google are encrypted at rest in our database using industry-standard AES-256-GCM encryption before storage.
Role-Based Access: Access to projects, financial records, employee profiles, and company boards is governed by strict role permissions (Admin, Project Manager, Web Developer, CFO).
Session & Password Controls: Secure password hashing via Bcrypt, HTTPS enforcement, and automated audit logging of sensitive actions.

5. Data Retention & Revoking Access

You maintain complete control over your connected Google account and calendar synchronization:

Disconnecting Google Calendar: You can disconnect your Google account at any time via the Google Calendar Integration section in your Account settings. Upon disconnecting, your encrypted OAuth tokens are permanently deleted from our database, and external synced calendar entries are removed.
Google Security Settings: You may also revoke Maverick Ops Hub's access directly at any time through your Google Account Permissions page.
Account Deletion: If your Maverick Ops Hub account is deactivated or deleted by an administrator, all associated credentials and personal calendar events are purged.

6. Changes to this Policy

We may update this Privacy Policy periodically to reflect enhancements to our platform features or applicable legal requirements. Any modifications will be posted directly to this page with an updated revision date.

7. Contact & Questions

If you have questions regarding this Privacy Policy or our data handling practices, please reach out to your system administrator or contact us at:

Maverick Ops Hub · Privacy & Data Operations
Email: admin@mvrk.nz