Approval App ("we", "our", or "us") operates the Approval App service. This policy explains what information we collect, how we use it, and your choices. By using Approval App you agree to the practices described here.
Information we collect
Account and authentication. When you sign in with an OAuth provider, we receive your email address, name, and profile picture from that provider. When you sign in with a magic link, we receive your email address. We store your email and the authentication method you used.
Approval activity. As part of providing the service, we record approval requests, decisions, comments, and timestamps. This audit trail is a core product feature and is associated with your account.
Payment information. Payments are processed by a third-party payment processor. We receive the outcome of your payment (success or failure), the payment intent identifier, and the amount charged. We do not store full card numbers or sensitive payment details.
Technical information. We may log server-side events for operational and security purposes, including request timestamps and error events. We do not use third-party analytics trackers in the current build.
How we use your information
- To create and maintain your account
- To provide the approval workflow service
- To process and record payments
- To send transactional emails (sign-in links, receipts)
- To investigate and fix errors or security incidents
- To comply with legal obligations
We do not sell your personal information to third parties.
Service providers
We share data with third-party service providers only as necessary to operate the service — including providers for application hosting and infrastructure, user authentication, payment processing, and transactional email delivery. Payment card data is handled by our payment processor under their own PCI compliance programme; we never store full card numbers. These providers access your information only as necessary to perform their function and are bound by appropriate data-protection obligations. We do not sell your personal information.
Data retention
We retain your account and approval records for as long as your account is active or as needed to provide the service. Payment records are retained as required for financial and legal compliance. If you request account deletion, we will delete or anonymise your personal data within a reasonable timeframe, except where retention is required by law.
Your rights
Depending on your location, you may have the right to access, correct, or delete your personal data, or to object to or restrict certain processing. To exercise any of these rights, contact us at support@ggraf.com.
Cookies and local storage
Approval App uses session cookies to maintain your authenticated session. These cookies are HTTP-only and scoped to the service domain. We do not use third-party advertising or tracking cookies. Your browser may also store authentication tokens in local storage as part of the authentication session management.
Security
We take reasonable technical measures to protect your information, including encrypted connections (HTTPS), HTTP-only session cookies, and row-level security on the database. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
Children
Approval App is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with their information, please contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. When we do, we will revise the "last updated" date at the top. Continued use of the service after changes constitutes acceptance of the updated policy.
Contact
Questions about this policy? Email us at support@ggraf.com.