Privacy Policy

01. Overview & Scope

Connect Marketing Services Ltd (“we”, “us”, or “our”) operates the Connect Marketing Hub, accessible via https://www.cmsu.top. We provide enterprise portals including IT Service Desk, Fleet & Vehicle Booking, AssetTrack Warehousing, Digital Utilities, Meeting Room Reservation, Corporate Chat, and Daily Accountability Tracking.

This Privacy Policy describes how we collect, process, store, and safeguard corporate and personal data when you visit our Hub, register an employee account, utilize our APIs, or authenticate via enterprise identity providers such as Google OAuth 2.0.

02. Information We Collect

We collect minimal information necessary to deliver, authenticate, and secure corporate operations:

• Account Information: Full name, username, official corporate email address, assigned department/business unit, and access role.
• Operational Deliverables: Daily accountability standup tasks, IT incidents, meeting reservations, fleet vehicle dispatches, and warehouse inventory transactions.
• Technical Diagnostics: Browser user-agent headers, coarse network origin derived from edge infrastructure, and system activity telemetry.

03. Google API Services User Data Policy Compliance

Connect Marketing Hub enables single sign-on (SSO) through Google OAuth 2.0. When you select “Continue with Google”, we access standard OpenID Connect profile scopes (openid, email, profile).

Specifically regarding Google user data:

• Single Purpose Authentication: Google user data (email address, display name, and avatar image) is used exclusively to verify employee identity and establish internal Hub sessions.
• No Commercial Transfer or Sale: We never sell, monetize, or transfer Google account data to third-party data brokers or marketing networks.
• Strict Confidentiality: No unauthorized personnel inspect private Google account tokens or profile payloads unless required for technical troubleshooting or by applicable law.

04. Privacy-First Analytics & Cryptographic IP Hashing

We maintain visitor privacy and zero-surveillance redirect mechanics:

• One-Way SHA-256 IP Hashing: In our Digital Utilities shortener, client IP addresses are processed through a one-way cryptographic SHA-256 hash solely for deduplicating repeated clicks in analytics. Raw IP addresses are never stored in readable format.
• Zero Cross-Site Tracking: We do not deploy third-party advertising tracking pixels or commercial fingerprinting scripts.

05. Data Security & Cryptography

We employ defense-in-depth security standards to protect company data:

• Password Key Derivation: Direct account passwords are salted and hashed using CPU-hard Scrypt key derivation. Raw passwords are never stored in plaintext.
• Secure Sessions: Session authentication tokens are cryptographically random 256-bit keys transmitted exclusively over TLS/HTTPS encrypted transport.
• Database Replication: Cloud database storage is secured with automated replication, strict access control lists, and daily encrypted snapshots.

06. Data Retention & User Erasure Rights

Operational records and employee credentials are maintained as long as an account remains active with Connect Marketing Services. Employees can request account reconciliation or data review via People & Culture (HR) or IT Administration.

07. Third-Party Infrastructure Disclosures

Personal data is not disclosed to external entities except verified cloud infrastructure providers (Vercel, Turso LibSQL Cloud) operating under enterprise SOC 2 and GDPR data processing agreements.

08. Contact & Governance

For questions or requests regarding this Privacy Policy, please contact: