DigitalFruit Application Policies

Last updated: September 21, 2026

DigitalFruit Application Privacy Policy

Scope

This policy describes how DigitalFruit handles information through client applications, dashboards, portals, and associated workflows that link to this policy.

These services help client organizations manage their authorized activities. The client organization determines the purposes for which its records are collected and used. DigitalFruit provides technical implementation, operation, or support as applicable to the service.

This policy supplements any applicable client privacy notices and service agreements. It does not replace them.

Information processed

Depending on the application and features used, information may include:

• Account information: names, email addresses, authentication identifiers, profile images, and access permissions.
• Client records: information supplied by the client organization, authorized users, or people interacting with the service.
• Documents and responses: document contents, signatures, submissions, approvals, consent choices, and related records.
• Communication information: recipient details, messages, delivery status, and interaction timestamps where tracking is enabled.
• Technical information: session information, operational logs, audit records, request identifiers, and diagnostic or security information.

Not every application processes every category. Information may come from users, client organizations, authentication providers, or connected services.

Purposes

Information is processed to:

• Authenticate users and manage authorized access.
• Provide the application’s functions and configured workflows.
• Maintain records and process submissions or documents.
• Deliver service-related communications.
• Provide support and investigate errors.
• Protect the service and maintain audit records.
• Meet applicable contractual, recordkeeping, and legal requirements.

Client records are processed for the client’s authorized purposes. Application-specific notices explain additional uses where needed.

Google authentication and integrations

Where Google sign-in is offered, the application receives account information made available through the requested permissions, such as your name, email address, account identifier, and profile image. DigitalFruit does not receive your Google password.

Signing in does not automatically grant access to client records. Application permissions are managed separately.

Some applications may use additional Google integrations, such as document storage. Their access depends on the integration and permissions configured or authorized. Google sign-in alone does not give an application unrestricted access to your Google account.

Google user data is used to provide and support the authorized features. It is not sold, used for advertising, or used to train general-purpose artificial intelligence models.

Use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements where applicable.

Access and sharing

Information may be accessed by:

• Authorized users of the relevant client organization.
• DigitalFruit personnel who need access to provide or support the service.
• Service providers needed for hosting, authentication, storage, communications, document processing, or other enabled functions.

Providers differ by application and may include Google, Supabase, and CRM or communication platforms.

Information may also be disclosed as required by law or where necessary to investigate misuse or protect affected people and systems.

Contact DigitalFruit for information about providers used by a particular application.

Storage and security

DigitalFruit uses access controls and other safeguards appropriate to the service. Users must protect their accounts and handle records within their authorization.

Information may be processed or stored in countries other than the country of the user or client organization, depending on the providers and service configuration. Contact us for details about a particular application.

No electronic service can guarantee absolute security.

Retention

Retention depends on the type of information, the client’s instructions and applicable agreements, operational needs, and legal requirements.

Removing an account or ending access does not automatically delete client records. Backup copies and operational logs may remain until their applicable retention cycles end.

Cookies, browser storage, and tracking

Applications may use cookies or browser storage for authentication, preferences, and operation. Clearing or disabling this storage may affect functionality.

Some configured workflows record communication delivery or interactions. Any additional analytics or optional tracking should be described in the relevant application’s notices.

Requests and choices

Contact DigitalFruit with questions about this policy or information handled through a service.

Requests concerning records controlled by a client organization may be referred to that organization. Identity and authority may need to be verified before information is disclosed, corrected, or deleted. Requests are handled subject to applicable obligations and retention requirements.

You can revoke Google access through your Google account settings. Revocation may prevent connected features from working and does not automatically delete previously retained client records.

Changes

The current policy and revision date will be published here. Material changes will be communicated through an appropriate channel.

Contact

DigitalFruit
Email: ian@digitalfruit.marketing

Please identify the application and client organization involved. Do not include passwords or sensitive records in an initial email.

Last updated: September 21, 2026

DigitalFruit Application Terms of Service

Scope

These terms apply to applications, dashboards, portals, and associated workflows provided or supported by DigitalFruit that link to these terms.

Individual services may be provided for a client organization. These terms supplement applicable client policies and service agreements. If an applicable written service agreement conflicts with these terms, that agreement governs the conflicting matter.

Access and accounts

Some services are available only to approved users. Authentication does not automatically grant permission to access a client organization’s records.

Users must:

• Use an account they are authorized to use.
• Protect credentials and authentication sessions.
• Act within their assigned permissions.
• Report suspected unauthorized access promptly.
• Stop accessing restricted services when authorization ends.

Access may be changed, suspended, or removed by the client organization or authorized service administrators.

Permitted use

Use the service only for its intended purpose and within your authorization.

You must not:

• Access, disclose, copy, or export information without authority.
• Share private document links or restricted records with unintended recipients.
• Bypass access controls or interfere with service operation.
• Impersonate someone or submit responses on their behalf without authority.
• Introduce malicious content or use the service unlawfully.
• Use client information for unrelated personal or commercial purposes.

Information and actions

Provide accurate information to the best of your knowledge and promptly report material errors.

Before submitting documents, changing records, or sending communications, review the relevant information, recipients, and intended action. Bulk actions require the same care as individual actions.

Do not retry an uncertain action without checking its outcome when doing so could create duplicate records, documents, or messages.

Documents, approvals, and consent

The applicable document, notice, or request governs the meaning of a signature, approval, consent, or other response.

Using a service does not itself grant consent on another person’s behalf. Do not alter records to misrepresent a person’s response.

Questions about a document, correction, or withdrawal of consent should be directed to the organization responsible for that request.

Privacy and confidentiality

Handle personal information and confidential records in accordance with your authorization, applicable client policies, and the DigitalFruit Application Privacy Policy.

Download or share records only when necessary and authorized. Protect copies retained outside the service.

Connected services and availability

Applications may depend on third-party authentication, hosting, communications, document, database, and storage providers.

Delays, outages, failed deliveries, and processing errors can occur. Review errors and incomplete actions, and use an appropriate alternative process for time-sensitive matters.

Features may be updated or temporarily unavailable for maintenance, security, or operational reasons.

Ownership

Use of the service does not transfer ownership of client records, software, branding, documents, or other materials.

Users may access and use those materials only as authorized. Ownership and licensing arrangements under applicable agreements remain in effect.

Suspension and termination

Access may be suspended or ended when authorization expires, misuse is suspected, or action is needed to protect the service.

Ending access does not automatically delete records that must be retained under applicable agreements, client requirements, or law.

Changes

The current terms and revision date will be published here. Material changes will be communicated through an appropriate channel.

Contact

DigitalFruit
Email: ian@digitalfruit.marketing

Identify the application and client organization when requesting support. Questions about a client’s records, decisions, or policies may be referred to that organization.