Legal
Privacy Policy
How MyUnit handles personal information and data received through Google APIs.
Effective date: 24 August 2026
1. Scope
This Privacy Policy explains how MyUnit processes personal data when organizations and their authorized users use the MyUnit real-estate operating system, including its CRM, appointment, document, payment, reporting and client-portal features.
Each customer organization controls the business data it enters into MyUnit. MyUnit processes that data to provide the contracted service and applies tenant isolation so one organization cannot access another organization’s records.
2. Information we process
We may process account and profile information, organization details, login and security records, CRM contacts, leads, appointments, deal and property information, uploaded documents, payment records, support communications and technical usage data.
We receive information directly from users, from their organization, from services they choose to connect, and from normal use of the platform.
3. Google user data
If a user chooses to connect Google Calendar, MyUnit requests the Google Calendar events permission and basic identity scopes needed to identify the connected account. This can include the connected account email address and event data such as titles, times, locations, descriptions, attendees, invitation responses and Google event identifiers.
MyUnit uses Google user data only to display calendar availability and events inside the authorized user’s workspace; create, update and cancel CRM appointments; send meeting invitations and changes; monitor synchronization health; and help the user reconnect when Google authorization expires or is revoked.
MyUnit does not use Google user data for advertising, does not sell it, and does not allow human access except when necessary for security, support requested by the customer, legal compliance, or operation of the service under appropriate access controls.
MyUnit’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
4. Legal and operational purposes
We process information to provide and secure the service, authenticate users, enforce permissions, synchronize authorized integrations, prevent fraud and abuse, provide support, maintain business records, improve reliability and comply with applicable law.
5. Service providers and disclosures
We may use vetted infrastructure, database, monitoring, communications and support providers that process information only to help operate MyUnit. We do not sell personal data or Google user data.
We may disclose information when required by law, to protect users or the platform, or as part of a corporate transaction subject to appropriate confidentiality and data-protection safeguards.
6. Security
MyUnit uses transport encryption, role-based access controls, tenant and user scoping, audit-oriented records and encrypted storage for Google OAuth credentials. Google access and refresh tokens are encrypted using authenticated encryption and are not stored in plaintext.
No online service can guarantee absolute security, but we maintain administrative and technical safeguards designed to protect confidentiality, integrity and availability.
7. Retention and deletion
Google OAuth credentials are retained only while the user keeps the connection active. Disconnecting Google Calendar removes the stored connection credentials and stops future access. A user can also revoke MyUnit from their Google Account permissions.
Operational synchronization metadata and business appointment records may be retained for audit, contractual or legal purposes according to the customer organization’s retention settings and applicable law. Users and organizations may request access, correction or deletion, subject to legitimate retention obligations.
8. International processing
MyUnit and its service providers may process data in countries other than the user’s country. We use contractual and technical safeguards appropriate to the nature of the data and the services provided.
9. Your choices and rights
Users can choose whether to connect Google Calendar and can disconnect it at any time. Depending on applicable law, individuals may request access, correction, deletion, restriction or a copy of their personal data, or object to certain processing.
10. Changes and contact
We may update this policy when the service, law or our data practices change. The latest version will remain available at this URL with its effective date.
For privacy questions or requests, contact zion@dubai-realestate.co.il.