top of page

PRIVACY POLICY

Last updated: 14 August 2026

This Privacy Policy explains how Envera Technologies (360) Limited, trading as Envera Group ("Envera", "we", "us", or "our"), collects, accesses, uses, stores, shares, and protects personal information when you use our websites, applications, software, integrations, platforms, and related services, including Envera OS (collectively, the "Services").

This Privacy Policy applies when you:

  • Visit https://www.envera.co.uk or another Envera website that links to this Privacy Policy;

  • Create or use an Envera OS account;

  • Use Envera OS;

  • Connect your Google Account to Envera OS;

  • Use the Google Calendar integration;

  • Use the Google Drive integration;

  • Contact us;

  • Request technical or customer support;

  • Purchase or subscribe to our Services;

  • Participate in demonstrations, events, or other business activities; or

  • Otherwise interact with Envera.

If you do not agree with this Privacy Policy, please do not use our Services.

For privacy-related questions, requests, or concerns, contact:

Email: dpo@enveragroup.co.uk

1. INFORMATION WE COLLECT

We may collect different types of information depending on how you interact with Envera OS and our other Services.

1.1 Information You Provide to Us

We may collect personal information that you voluntarily provide when you:

  • Create an account;

  • Complete forms;

  • Contact us;

  • Request information;

  • Request a demonstration;

  • Purchase or subscribe to a Service;

  • Use functionality within Envera OS;

  • Upload information or files;

  • Connect a third-party service;

  • Contact technical support; or

  • Otherwise communicate with us.

This information may include:

  • Name;

  • Email address;

  • Telephone number;

  • Company or organisation name;

  • Job title;

  • Account information;

  • Contact preferences;

  • Authentication-related information;

  • Information you enter into Envera OS;

  • Information or files you upload;

  • Support requests;

  • Communications with us; and

  • Other information you choose to provide.

You are responsible for ensuring that information you provide to us is accurate and up to date.

1.2 Information Automatically Collected

When you access or use our Services, certain technical and usage information may be collected automatically.

This may include:

  • IP address;

  • Browser type and version;

  • Device type;

  • Operating system;

  • Device identifiers;

  • Language settings;

  • Referring URLs;

  • Pages or features accessed;

  • Login timestamps;

  • Session information;

  • Application activity;

  • Error logs;

  • Diagnostic information;

  • Security logs; and

  • General geographic information derived from an IP address.

We primarily use this information to operate, maintain, secure, troubleshoot, and improve our Services.

1.3 Information Received From Third-Party Services

We may receive information from third-party services when you choose to connect those services to Envera OS.

Envera OS currently integrates with Google for:

  • Google Calendar

  • Google Drive

We only access Google user data after you authorise the permissions requested through Google's OAuth authorisation process.

The information we receive depends on the Google permissions you approve.

2. GOOGLE USER DATA

This section specifically explains how Envera OS accesses, uses, stores, shares, and protects Google user data.

Where another section of this Privacy Policy conflicts with this section regarding information received from Google APIs, this Google User Data section applies.

2.1 Google Services Used by Envera OS

Envera OS currently integrates with:

  • Google Calendar

  • Google Drive

Envera OS does not currently request access to Gmail, Google Contacts, Google Photos, YouTube, or other Google services unless our application functionality, OAuth permissions, and this Privacy Policy are updated accordingly.

2.2 How Envera OS Accesses Google User Data

Envera OS uses Google's OAuth 2.0 authorisation process.

When you choose to connect your Google Account to Envera OS, Google presents the permissions requested by Envera OS before you grant access.

Envera OS only accesses Google user data after you explicitly approve the requested permissions.

We do not receive, request, or store your Google Account password.

We request access only to Google services and permissions that are required to provide the relevant Envera OS functionality.

You may choose not to grant Google access. However, Google Calendar or Google Drive features within Envera OS may not function without the required permissions.

3. GOOGLE CALENDAR DATA

When you connect Google Calendar to Envera OS, we may access information covered by the permissions you have granted.

Depending on the permissions authorised, this may include:

  • Calendar names;

  • Calendar identifiers;

  • Calendar events;

  • Event identifiers;

  • Event titles;

  • Event descriptions;

  • Event start dates and times;

  • Event end dates and times;

  • Event locations;

  • Meeting links;

  • Event attendees;

  • Event organisers;

  • Event status;

  • Recurrence information;

  • Availability information;

  • Calendar metadata; and

  • Other information contained within authorised calendar events.

3.1 How We Use Google Calendar Data

Google Calendar data is used solely to provide or improve Calendar-related functionality within Envera OS.

This may include:

  • Displaying Google Calendar events inside Envera OS;

  • Showing users their schedules;

  • Synchronising authorised calendar events;

  • Creating events at the user's request;

  • Updating events at the user's request;

  • Deleting events at the user's request;

  • Managing event information;

  • Showing meeting information;

  • Showing event locations;

  • Displaying event attendees;

  • Checking availability;

  • Helping identify scheduling conflicts;

  • Linking calendar events to relevant Envera OS records;

  • Supporting workflows that involve calendar functionality; and

  • Maintaining synchronisation between Google Calendar and Envera OS.

Google Calendar data is not used for unrelated purposes.

4. GOOGLE DRIVE DATA

When you connect Google Drive to Envera OS, we may access information covered by the permissions you have granted.

Depending on the permissions authorised, this may include:

  • File names;

  • Folder names;

  • File identifiers;

  • Folder identifiers;

  • File types;

  • File metadata;

  • File creation dates;

  • File modification dates;

  • Folder structures;

  • File ownership information where authorised;

  • File sharing information where authorised;

  • Files or folders you select or authorise;

  • File contents where required to provide requested functionality; and

  • Other Drive information covered by the permissions you grant.

4.1 How We Use Google Drive Data

Google Drive data is used solely to provide or improve file and document functionality within Envera OS.

This may include:

  • Displaying Google Drive files within Envera OS;

  • Displaying Google Drive folders;

  • Allowing users to browse authorised Drive content;

  • Allowing users to select files;

  • Retrieving authorised files;

  • Opening or displaying files;

  • Uploading files to Google Drive where authorised;

  • Downloading files at the user's request;

  • Creating folders where authorised;

  • Updating authorised files;

  • Updating file metadata;

  • Organising files and folders;

  • Linking Google Drive files to relevant Envera OS records;

  • Synchronising authorised file information; and

  • Providing other Google Drive functionality requested by the user.

Google Drive data is not accessed or used for purposes unrelated to the Google Drive functionality authorised by the user.

5. RESTRICTIONS ON USE OF GOOGLE USER DATA

Information received through Google Calendar and Google Drive is used only to provide or improve user-facing functionality that the user has requested or authorised.

Google user data is not used for:

  • Advertising;

  • Personalised advertising;

  • Retargeting;

  • Advertising profiling;

  • Building advertising audiences;

  • Marketing unrelated products or services;

  • Selling personal information;

  • Selling Google user data;

  • Data brokerage;

  • Creditworthiness assessments;

  • Unrelated profiling;

  • Unrelated behavioural analysis;

  • Unrelated analytics;

  • Marketing analytics based on Google user data;

  • Training general-purpose artificial intelligence models;

  • Training non-personalised machine-learning models; or

  • Any purpose unrelated to providing or improving authorised Envera OS functionality.

General provisions elsewhere in this Privacy Policy relating to analytics, business development, marketing, or product improvement do not authorise Envera to use Google Calendar or Google Drive user data for those unrelated purposes.

6. GOOGLE API SERVICES USER DATA POLICY

Envera Technologies (360) Limited's use and transfer to any other application of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Google user data is accessed only after user authorisation and is used only where required to provide or improve user-facing Envera OS functionality requested by the user.

7. STORAGE OF GOOGLE USER DATA

We only store Google user data where storage is reasonably necessary to provide authorised Envera OS functionality.

Depending on the features being used, Envera OS may store limited information such as:

  • Google Calendar identifiers;

  • Event identifiers;

  • Google Drive file identifiers;

  • Folder identifiers;

  • Synchronisation metadata;

  • Integration configuration;

  • OAuth access tokens;

  • OAuth refresh tokens; and

  • Limited cached information necessary to provide requested functionality.

Where reasonably practical, information may be retrieved directly from Google when needed instead of being permanently duplicated within Envera OS.

We do not retain Google user data for longer than reasonably necessary to provide the relevant functionality unless retention is required or permitted by applicable law.

8. GOOGLE OAUTH TOKENS

To maintain a user's authorised connection with Google, Envera OS may securely store:

  • OAuth access tokens;

  • OAuth refresh tokens; and

  • Related authentication information.

These credentials are used solely to maintain authorised access to Google Calendar and Google Drive.

OAuth credentials:

  • Are treated as confidential;

  • Are restricted to authorised systems;

  • Are protected using appropriate security measures;

  • Are not sold;

  • Are not used for advertising;

  • Are not used for marketing;

  • Are not transferred for unrelated purposes; and

  • Are removed or invalidated when they are no longer reasonably required where technically possible.

9. SHARING GOOGLE USER DATA

We do not sell Google user data.

We do not transfer or disclose Google Calendar or Google Drive user data to third parties for:

  • Advertising;

  • Personalised advertising;

  • Marketing;

  • Data brokerage;

  • Unrelated profiling;

  • Unrelated analytics;

  • Creditworthiness assessments; or

  • Any other unrelated commercial purpose.

Google user data may only be processed or disclosed where reasonably necessary to:

  • Provide functionality requested by the user;

  • Operate Envera OS;

  • Maintain the Google integration;

  • Provide necessary infrastructure;

  • Use service providers acting on our behalf;

  • Maintain security;

  • Investigate fraud or abuse;

  • Investigate technical issues; or

  • Comply with applicable law or valid legal requirements.

Where a service provider processes Google user data on our behalf, that provider must be subject to appropriate contractual, confidentiality, security, and data protection obligations.

Such providers are not permitted to independently use Google user data for advertising or unrelated marketing purposes.

10. HUMAN ACCESS TO GOOGLE USER DATA

Envera personnel do not manually access or read Google user data except where permitted and reasonably necessary.

This may include situations where:

  • You explicitly request support and authorise access to specific information;

  • Access is required to investigate a technical problem;

  • Access is required to investigate a security incident;

  • Access is required to investigate suspected fraud or abuse;

  • Access is necessary to comply with applicable law; or

  • Information has been appropriately aggregated or anonymised and is used for permitted internal operations.

Any human access is restricted to authorised personnel with a legitimate requirement to access the information.

11. REVOKING GOOGLE ACCESS

You can revoke Envera OS's access to your Google Account at any time through your Google Account's security and third-party connection settings.

Where functionality is available, you may also disconnect Google Calendar or Google Drive directly through Envera OS.

After Google authorisation is revoked, Envera OS will no longer be able to make new Google API requests using the revoked authorisation.

You may also contact:

dpo@enveragroup.co.uk

for assistance disconnecting your Google integration.

12. DELETION OF GOOGLE USER DATA

You may request deletion of Google Calendar or Google Drive user data stored by Envera OS.

To request deletion, contact:

dpo@enveragroup.co.uk

Following verification of a valid deletion request, we will delete or anonymise Google user data under our control that is no longer required to provide the Services, subject to any applicable legal retention requirements.

Where applicable, we will also remove or invalidate stored Google OAuth credentials associated with the relevant account.

Revoking Google access through Google does not necessarily automatically delete information that was previously stored by Envera OS. You may separately request deletion by contacting us.

13. SECURITY OF GOOGLE USER DATA

We implement appropriate technical and organisational security measures designed to protect Google user data against:

  • Unauthorised access;

  • Unauthorised disclosure;

  • Accidental loss;

  • Alteration;

  • Destruction; and

  • Misuse.

Measures may include:

  • Access controls;

  • Authentication controls;

  • Encryption where appropriate;

  • Secure communications;

  • Restricted administrative access;

  • Logging and monitoring;

  • Secure software development practices;

  • Credential protection;

  • Data minimisation; and

  • Internal security procedures.

Access to Google user data is limited to systems and authorised personnel where access is required to provide the requested functionality.

14. HOW WE USE OTHER PERSONAL INFORMATION

Personal information that is not subject to the specific Google user data restrictions above may be processed for purposes including:

  • Providing our Services;

  • Creating and managing user accounts;

  • Authenticating users;

  • Operating Envera OS;

  • Providing requested features;

  • Maintaining integrations;

  • Providing customer support;

  • Responding to enquiries;

  • Sending administrative communications;

  • Managing subscriptions;

  • Processing payments where applicable;

  • Maintaining system security;

  • Preventing fraud;

  • Detecting misuse;

  • Diagnosing technical problems;

  • Improving the reliability of our Services;

  • Understanding general usage of our Services;

  • Maintaining business records;

  • Complying with legal obligations;

  • Resolving disputes;

  • Establishing, exercising, or defending legal claims; and

  • Protecting our organisation, users, and systems.

Google user data remains subject to Sections 2–13 and is not automatically used for every purpose listed in this section.

15. LEGAL BASES FOR PROCESSING

Where applicable data protection law requires us to identify a lawful basis for processing personal information, we may rely on one or more of the following.

15.1 Consent

We may process information where you have provided consent.

Where processing relies on consent, you may withdraw that consent at any time.

Withdrawal does not affect processing that was lawful before consent was withdrawn.

15.2 Performance of a Contract

We may process information where necessary to:

  • Enter into a contract with you;

  • Provide Services requested by you; or

  • Fulfil our contractual obligations.

15.3 Legitimate Interests

We may process information where necessary for our legitimate interests, provided those interests are not overridden by your rights and interests.

These interests may include:

  • Protecting our systems;

  • Maintaining our Services;

  • Preventing fraud;

  • Improving reliability;

  • Providing support;

  • Managing our business operations; and

  • Protecting legal rights.

15.4 Legal Obligations

We may process personal information where necessary to comply with applicable laws, regulations, court orders, or other legal requirements.

15.5 Vital Interests

In limited circumstances, personal information may be processed where necessary to protect an individual's vital interests.

16. SHARING PERSONAL INFORMATION

We do not sell personal information.

We may share personal information with the following categories of recipients where reasonably necessary.

16.1 Service Providers

We may use third-party providers for functions including:

  • Cloud hosting;

  • Database infrastructure;

  • Authentication;

  • Cybersecurity;

  • Email delivery;

  • Communications;

  • Application infrastructure;

  • Monitoring;

  • Technical support;

  • Payment processing; and

  • Other operational services.

These providers are permitted to process information only where necessary to provide their services to us and subject to applicable obligations.

16.2 Third-Party Integrations

Where you choose to connect another service to Envera OS, information may be exchanged with that service where necessary to provide the integration.

The third party's own terms and privacy policy may also apply to your use of its service.

16.3 Affiliates

Information may be shared with companies within our corporate group where necessary to provide our Services or manage legitimate business operations.

16.4 Business Transfers

If Envera is involved in a merger, acquisition, financing, restructuring, sale, insolvency, or similar business transaction, personal information may be transferred as part of that transaction where permitted by law.

16.5 Legal Requirements

Information may be disclosed where reasonably necessary to:

  • Comply with applicable law;

  • Respond to a lawful request;

  • Comply with a court order;

  • Protect legal rights;

  • Prevent fraud or abuse;

  • Investigate security incidents; or

  • Protect the safety of users or others.

17. COOKIES AND SIMILAR TECHNOLOGIES

Our websites and Services may use cookies and similar technologies.

These technologies may be used to:

  • Keep users signed in;

  • Remember preferences;

  • Provide website functionality;

  • Maintain security;

  • Diagnose technical problems;

  • Understand general website usage; and

  • Improve reliability.

Where applicable law requires consent for non-essential cookies, we will seek appropriate consent.

You may manage cookies through your browser settings.

Disabling certain cookies may affect some functionality.

18. DATA RETENTION

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected.

Retention may be necessary to:

  • Provide our Services;

  • Maintain user accounts;

  • Maintain authorised integrations;

  • Fulfil contractual obligations;

  • Meet legal requirements;

  • Meet accounting requirements;

  • Resolve disputes;

  • Prevent fraud;

  • Maintain security; or

  • Enforce agreements.

The appropriate retention period may depend on:

  • The type of information;

  • Why the information was collected;

  • Whether the user continues to use our Services;

  • Applicable legal requirements;

  • Contractual requirements; and

  • Security requirements.

When personal information is no longer required, we will take reasonable steps to delete or anonymise it.

Where immediate deletion is not technically possible, including where information exists in secure backup systems, the information may remain isolated until it is deleted through our normal backup lifecycle.

Google user data is also subject to the specific requirements described in Sections 2–13.

19. DATA SECURITY

We implement appropriate technical and organisational measures designed to protect personal information.

Depending on the systems involved, these measures may include:

  • Access controls;

  • Authentication systems;

  • Encryption where appropriate;

  • Secure network communications;

  • Restricted administrative access;

  • Security logging;

  • Monitoring;

  • Secure development practices;

  • Data minimisation; and

  • Internal security procedures.

Access to personal information is limited to authorised individuals and systems where access is required.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

Users are responsible for taking appropriate steps to protect their accounts, passwords, devices, and authentication credentials.

20. INTERNATIONAL DATA TRANSFERS

Some service providers or infrastructure used to operate our Services may process information outside the United Kingdom.

Where personal information is transferred internationally, we take appropriate steps to ensure transfers are made in accordance with applicable data protection law.

Where required, safeguards may include:

  • Adequacy regulations or decisions;

  • Approved contractual safeguards;

  • Standard contractual clauses;

  • International Data Transfer Agreements; or

  • Another legally recognised transfer mechanism.

21. CHILDREN'S PRIVACY

Our Services are not intended for children under 18 unless explicitly stated otherwise for a particular Service.

We do not knowingly collect personal information from children under 18 without appropriate authorisation.

If we become aware that personal information relating to a child has been collected contrary to applicable requirements, we will take reasonable steps to remove it.

If you believe that a child has provided personal information to us, contact:

dpo@enveragroup.co.uk

22. YOUR PRIVACY RIGHTS

Depending on your location and applicable law, you may have rights relating to your personal information.

These may include the right to:

  • Request access to personal information we hold about you;

  • Request a copy of your information;

  • Request correction of inaccurate information;

  • Request completion of incomplete information;

  • Request deletion of your information;

  • Request restriction of processing;

  • Object to certain processing;

  • Request data portability where applicable;

  • Withdraw consent where processing relies on consent; and

  • Make a complaint to an applicable supervisory authority.

Some rights may be subject to legal exceptions or requirements.

To exercise your rights, contact:

dpo@enveragroup.co.uk

We may need to verify your identity before completing certain requests.

23. RIGHT TO OBJECT

Where we process information based on legitimate interests, you may have the right to object to that processing.

Where personal information is used for direct marketing, you may object to that processing at any time.

To exercise this right, contact:

dpo@enveragroup.co.uk

24. WITHDRAWING CONSENT

Where processing is based on your consent, you may withdraw consent at any time.

You may withdraw consent by:

  • Using settings available within the relevant Service;

  • Disconnecting an integration; or

  • Contacting dpo@enveragroup.co.uk.

Withdrawal does not affect processing that took place lawfully before consent was withdrawn.

25. ACCOUNT AND DATA DELETION

You may request deletion of personal information associated with your account.

Requests should be sent to:

dpo@enveragroup.co.uk

We may request information necessary to verify your identity and identify the relevant account.

Following a valid request, information that we are no longer required or permitted to retain will be deleted or anonymised.

Certain information may need to be retained where necessary to:

  • Comply with legal obligations;

  • Prevent fraud;

  • Maintain system security;

  • Resolve disputes;

  • Establish or defend legal claims; or

  • Meet regulatory requirements.

If you have connected Google Calendar or Google Drive, you may also request deletion of Google user data and Google OAuth credentials associated with your Envera OS account.

26. THIRD-PARTY WEBSITES AND SERVICES

Envera OS and our websites may include links to or integrations with third-party services.

Third-party providers are independent organisations and may operate under their own privacy policies and terms.

We are not responsible for the independent privacy practices of third-party services.

We encourage users to review the relevant third party's privacy information before using an external service.

27. MARKETING COMMUNICATIONS

Where permitted by law, we may send communications relating to Envera products, services, demonstrations, events, or business updates.

Where consent is legally required, we will obtain consent before sending marketing communications.

You may unsubscribe from marketing communications by:

  • Using the unsubscribe option provided in a marketing communication; or

  • Contacting dpo@enveragroup.co.uk.

You may continue to receive necessary service, account, security, or administrative communications.

Google Calendar and Google Drive user data obtained through Google APIs is not used for advertising or unrelated marketing purposes.

28. ANALYTICS

We may use general website and application usage information to understand:

  • How our Services perform;

  • Whether features operate correctly;

  • General application usage;

  • Technical problems;

  • Security issues; and

  • Opportunities to improve our Services.

Where required by law, appropriate consent mechanisms will be used for relevant analytics technologies.

Google Calendar and Google Drive user data obtained through Google APIs is not used for unrelated analytics, advertising profiling, behavioural advertising, or marketing analytics.

29. AUTOMATED PROCESSING AND ARTIFICIAL INTELLIGENCE

Some Envera Services may use automated systems or artificial intelligence functionality to provide features such as:

  • Supporting workflows;

  • Organising business information;

  • Processing user instructions;

  • Generating summaries;

  • Assisting users with information;

  • Producing recommendations; and

  • Improving user-facing functionality.

Where Google Calendar or Google Drive data is processed by automated functionality, such processing is limited to providing or improving functionality requested or authorised by the user and remains subject to the restrictions described in this Privacy Policy.

Google Workspace user data obtained through Google APIs is not used to develop, improve, or train general-purpose or non-personalised artificial intelligence or machine-learning models.

Where applicable law provides rights relating to decisions based solely on automated processing that produce legal or similarly significant effects, those rights will apply.

30. DO-NOT-TRACK FEATURES

Some browsers and devices include a "Do Not Track" or similar privacy preference.

Because there is not currently a universally implemented technical standard for all Do Not Track signals, our Services may not automatically respond to every such signal.

Where applicable law requires us to recognise a particular privacy preference mechanism, we will comply with those requirements.

31. COMPLAINTS

If you have concerns about our handling of personal information, please contact us at:

dpo@enveragroup.co.uk

If you are located in the United Kingdom, you may also have the right to make a complaint to the Information Commissioner's Office (ICO).

Making a complaint does not affect other legal rights available to you.

32. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time.

Updates may reflect changes to:

  • Envera OS;

  • Our Services;

  • Google integrations;

  • Third-party integrations;

  • Technology;

  • Legal requirements;

  • Regulatory requirements;

  • Security practices; or

  • Our information-processing practices.

When this Privacy Policy is updated, the "Last updated" date at the top of the page will be changed.

Where changes are material and applicable law requires additional notification, we may provide notice through our website, Envera OS, email, or another appropriate method.

We encourage users to review this Privacy Policy periodically.

33. HOW TO REVIEW, CORRECT, OR DELETE YOUR INFORMATION

You may contact us to request:

  • Access to your personal information;

  • Correction of inaccurate information;

  • Updating of outdated information;

  • Deletion of information;

  • Restriction of processing;

  • Withdrawal of consent;

  • Revocation of integrations; or

  • Information about how we process personal information.

Requests should be submitted to:

dpo@enveragroup.co.uk

Please provide sufficient information for us to identify the relevant account or records and verify your identity.

We will process valid requests in accordance with applicable data protection requirements.

34. CONTACT US

If you have questions, concerns, complaints, or requests regarding this Privacy Policy or our handling of personal information, please contact:

Envera Technologies (360) Limited
Trading as Envera Group

Product: Envera OS
Website: https://www.envera.co.uk
Privacy and Data Protection Email: dpo@enveragroup.co.uk

GOOGLE API SERVICES COMPLIANCE STATEMENT

Envera OS integrates with Google Calendar and Google Drive.

Envera Technologies (360) Limited's use and transfer to any other application of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Google user data is accessed only after the user grants permission through Google's OAuth authorisation process and is used only to provide or improve authorised, user-facing Envera OS functionality.

We do not sell Google user data.

We do not use Google user data for:

  • Advertising;

  • Personalised advertising;

  • Retargeting;

  • Unrelated marketing;

  • Data brokerage;

  • Creditworthiness assessments;

  • Unrelated profiling;

  • Unrelated analytics; or

  • Training general-purpose or non-personalised artificial intelligence or machine-learning models.

Users may revoke Envera OS access to their Google Account at any time through their Google Account settings.

Users may also request deletion of Google user data held by Envera by contacting:

dpo@enveragroup.co.uk

bottom of page