Privacy Policy

Last updated: March 26, 2026

RO Control (“the App”) is operated by JM Valley Group for internal franchise operations management. This policy describes how we handle your information.

1. Information We Collect

When you sign in with Google, we receive:

Email address and name from your Google account
Google OAuth tokens to access Google Workspace services (Drive, Sheets, Docs, Gmail) on your behalf

We also collect:

Login timestamps and IP addresses for security auditing
Actions performed within the app (task creation, schedule changes, etc.) for operational logging

2. How We Use Your Information

Authentication: Verify your identity and restrict access to authorized @jmvalley.com users
Google Workspace Integration: Read and write Google Sheets, Docs, Drive files, and Gmail on your behalf to automate store operations
Operations: Manage tasks, schedules, checklists, and communications for franchise stores
Security: Detect unauthorized access and maintain audit logs

3. Data Storage & Security

Data is stored on Google Cloud Run infrastructure in the United States (us-central1)
OAuth tokens are encrypted at rest using AES-256
All connections use HTTPS/TLS encryption
Access is restricted to authenticated @jmvalley.com Google Workspace users

4. Data Sharing

We do not sell, rent, or share your personal information with third parties. Data is only shared with:

Google Cloud Platform: Infrastructure hosting (us-central1)
Anthropic: Prompts sent to the Claude API when you invoke Jarvis, under the Anthropic Commercial Terms (no training on your data)

RO Control does not sync checklist, schedule, or any operational data with Jolt, Homebase, or Vantage Point. Those systems were replaced by native modules and are not configured as downstream data recipients.

5. Data Retention & Deletion

Operational logs are retained for 7 days
You can request a full export of your data at any time via the app
You can request deletion of your account and associated data by contacting your administrator
Google OAuth tokens can be revoked at any time through the app’s Integrations settings or via Google Account permissions

6. Google API Services

RO Control’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

7. Your Rights

You may:

Access and export your data at any time
Revoke Google access through the app or your Google Account settings
Request account deletion

8. Contact

For privacy questions, contact your JM Valley Group administrator or email the app developer at [email protected].