How RCH Workflow handles information
Last updated: 21 September 2026
1. Who this notice covers
This privacy notice applies to the RCH Workflow website and, when enabled for authorised users, the RCH Workflow business-assistant service. For privacy questions, contact RCHWorkflow@gmail.com.
2. Information we may process
Depending on the features an owner chooses to use, Workflow may process account details, business details, customer and job information, quotes, invoices, uploaded documents and media, and information from authorised integrations.
For Google-connected accounts, this may include Gmail message metadata, message content and attachments that fall within the mailbox scope the user has authorised Workflow to read.
3. Why Google data is used
When Gmail access is enabled, Workflow uses read-only Gmail data to provide user-facing business-assistant features such as identifying enquiries, building customer history, finding previous quotes and invoices, discovering business information, supporting quote and invoice preparation, and surfacing relevant follow-up items for owner review.
Workflow does not use Google user data for advertising, selling data, data-broker activity, credit decisions or unrelated profiling.
4. Google API Limited Use
Workflow handles information received from Google APIs in line with the Google API Services User Data Policy, including its Limited Use requirements.
Google user data is used only to provide or improve prominent user-facing Workflow features. Human access is limited to circumstances where the user has asked for specific support, where necessary for security or legal compliance, or where otherwise permitted by applicable Google policy and law.
5. AI processing
Where the owner enables AI-assisted features, limited relevant information may be processed by an approved AI service provider solely to provide the requested Workflow feature. Google user data will not be used for advertising or general-purpose model training by RCH Workflow. Production provider arrangements must be reviewed before public launch.
6. Sharing
Workflow does not sell personal information. Information may be shared with service providers only where needed to host, secure, support or provide the user-facing service, and subject to appropriate contractual and security controls. We may also disclose information where required by law or necessary to protect the service and its users.
7. Security
Workflow is designed around tenant separation, owner authentication, source evidence, encrypted integration credentials, controlled approvals and tested deletion boundaries. No security measure is absolute, and production hosting and recovery controls remain subject to launch review.
8. Retention and deletion
The launch design provides for account access to stop when a trial or paid subscription ends, with active private-source monitoring stopped at that point unless a separate lawful and explicit arrangement applies. Business data is intended to be retained for up to 60 days after access ends before permanent deletion, subject to legal obligations, security safeguards and tested deletion procedures.
Users will be able to request account deletion and, where applicable, export their information.
9. Public website data
This public information site does not intentionally use marketing cookies, advertising trackers or behavioural advertising. The hosting provider may process routine technical request logs for delivery, security and abuse prevention.
10. Your rights
Depending on applicable law, you may have rights to access, correct, delete, restrict or object to certain processing, and to receive a copy of your data. UK users may also have the right to complain to the Information Commissioner's Office.
11. Changes to this notice
We will update this privacy notice as the production service, providers and public integrations are finalised. Material changes will be reflected by updating the date above.
12. Contact
Email: RCHWorkflow@gmail.com