How we handle your information.

1. Who we are and what this covers

Web by Mateen is the professional website and digital services brand operated by Abdul Mateen in Pakistan. Mateen Freelance OS is a web-based workspace for prospecting, outreach, client relationships, projects, invoices, payments, tasks and related productivity tools.

This policy describes how we handle personal information when you visit webbymateen.com, submit an enquiry, request a demo or use an authorized Mateen Freelance OS workspace at crm.webbymateen.com. It also explains the limited Google data access used for Gmail sending.

2. Information we collect

• Enquiries and communications: name, email address, phone number, business name, website, service requirements, messages and any information you choose to provide through a form, email, WhatsApp or project discussion.
• Workspace and account information: account or team details, login credentials handled by the authentication system, profile information, preferences, activity records and settings.
• Business records entered into the CRM: prospect names, publicly available business contact information, client details, outreach drafts, messages and status, follow-ups, projects, invoices, payments, uploaded design assets and similar records entered by authorized users.
• Optional connected-account information: authorization credentials or tokens and data associated with integrations you actively choose to connect, such as Gmail or LinkedIn analytics features.
• Technical information: browser and device information, network identifiers such as IP addresses, cookies or local storage needed for login or preferences, and website analytics or abuse-prevention signals.

3. How information is used

We use information to respond to enquiries and provide requested services, operate and secure CRM accounts, store business records, support authorized outreach and workflows, send messages initiated or approved by a workspace user, maintain records and reports, troubleshoot problems and improve usability and reliability.

Website analytics may help us understand visits and improve the website. Any prospecting, marketing or client outreach performed through a workspace must be conducted by its authorized user in accordance with applicable privacy, email and anti-spam laws.

4. Gmail / Google API data: access, use, storage and sharing

What we access and use

When you explicitly connect Gmail, Google provides OAuth authorization credentials. We use the access token and, when issued, refresh token to authenticate Gmail API send requests. When an authorized workspace user approves an email, the CRM submits the recipient address, subject and email content to Gmail for sending on that connected account's behalf.

What is stored

The CRM retains connection status, authorization tokens and their expiration details as needed to maintain the connection. Workspace records may include prepared or approved outreach text, recipients, delivery status, timestamps and Gmail message identifiers returned after sending. These are stored as part of the CRM's business workflow.

With whom this is shared

Information needed to send an approved message is transmitted to Google through the Gmail API. Its recipients receive the message in the ordinary course of email delivery. The hosting and infrastructure providers that operate the application may process stored information as needed to provide the service. We do not sell Google user data, use it for targeted advertising or supply it to data brokers.

Google's Limited Use requirements

Mateen Freelance OS's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Google information is used only to provide or improve the user-facing functionality the user authorizes. We do not use data obtained from Gmail APIs to train generalized AI models or for advertising.

Disconnecting Gmail

You can revoke the app's Google account access at Google Account third-party connections. To request deletion of CRM-stored connection credentials or associated records, contact us at info@webbymateen.com. Revoking Google consent prevents further use of that authorization, but does not automatically erase previously sent email or all CRM business records.

5. Services, sharing and external links

We may use infrastructure and hosting services to operate the website and CRM, Google for authorized Gmail sending and site analytics, Cloudflare for security verification where enabled, and LinkedIn for user-authorized profile or performance integration. Each provider handles information under its own terms and privacy policies as applicable.

We may disclose information when required by law, to protect account or service security, or when necessary to provide a service you requested. We do not sell personal information or Google user data. Links to other websites are governed by their respective privacy practices.

6. Cookies and analytics

The website and CRM may use session cookies, remember-me functionality and local browser storage for authentication, preferences and navigation behavior. The public website uses Google Analytics 4 to understand website traffic and interaction patterns. Anti-spam checks may use Cloudflare Turnstile when enabled. You can adjust browser settings to restrict nonessential storage, although some login and security functions may require cookies.

7. Storage, security and retention

We use access controls, HTTPS connections, account authentication and other reasonable security measures designed to protect stored information. Internet-based services cannot be guaranteed completely secure.

We keep records for as long as reasonably necessary to provide the relevant service, maintain legitimate business records, comply with applicable obligations, resolve disputes or protect the system. Retention depends on the type of record and business context; it is not a promise of automatic deletion after a fixed number of days. Information may be processed in Pakistan or in other countries where supporting services or infrastructure operate.

8. Access, correction and deletion requests

For an enquiry about your personal information, or to request access, correction, export or deletion of information we control, email info@webbymateen.com with enough detail for us to locate your records. We may need to verify your identity or authority before responding. Requests are handled subject to applicable laws, security needs and legitimate retention obligations.

If your information was entered into a workspace by another business or authorized user, that workspace operator may be the appropriate first contact for requests about their business records.

9. Updates and contact

We may update this policy when features, data handling or legal requirements change. The effective date above indicates the version shown here. Material changes to the way Google user data is used will be disclosed before the changed use takes place and, where required, will involve obtaining fresh consent.

Questions can be sent to info@webbymateen.com.