Privacy Policy

1. Introduction

Dean I.T. Services ("we," "our," or "us"), doing business as Dean Ventures, provides a suite of business software applications and related services (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use any of our Services.

By accessing or using any Service, you agree to the collection and use of information in accordance with this policy. This Privacy Policy applies to all current and future applications in the Dean Ventures product suite unless a specific product explicitly states otherwise.

2. Our Services

This Privacy Policy covers the following applications and any additional products we may release under Dean Ventures:

• MyLawyerPal — practice management for lawyers and law firms
• MyRealtyPal — platform for real estate brokers, agents, and property managers
• MyVetPal — practice management for veterinary clinics and practices
• Future additions — other business software products released under Dean Ventures

References to "Service" or "Services" in this policy mean any of the applications listed above that you use, as well as our marketing websites and related support channels.

3. Information We Collect

3.1 Authentication Information

When you sign in using Google OAuth authentication through Auth0, we collect:

• Your Google account email address
• Your Google account profile name
• Your Google account profile picture URL
• Your Google account unique identifier
• OAuth tokens necessary for authentication (managed securely by Auth0)

3.2 Account and Profile Information

We collect information you provide when creating and managing your account, which may include:

• Full name and contact information
• Business or organization name and details
• Professional credentials and license information, where applicable
• Business addresses and contact details
• Subscription and billing information

3.3 Business and Client Data

As B2B practice and business management platforms, our Services store data related to your organization's operations. Depending on which Service you use, this may include:

• MyLawyerPal: client information, case records, court filings, intake forms, legal documents, and correspondence
• MyRealtyPal: client (buyer/seller) information, property and listing data, transaction records, showing notes, and related documents
• MyVetPal: client (pet owner) information, patient (pet) records, medical history, appointments, vaccination and medication records, and related documents
• Files, documents, notes, and correspondence uploaded or created within any Service

3.4 Financial Information

We collect financial data necessary to operate our Services, which may include:

• Invoice information and billing records
• Expense tracking data
• Cash flow records
• Payment, retainership, and subscription information

3.5 Usage and Technical Information

We automatically collect certain information when you use our Services:

• IP address and device information
• Browser type and version
• Pages visited and features used
• Date and time of access
• Error logs and performance data

4. How We Use Your Information

We use the collected information for the following purposes:

• To provide, maintain, and improve our Services
• To authenticate and manage user accounts through Google OAuth
• To process and manage your organization's business records within the Service you use
• To communicate with you about your account, services, and support requests
• To send important notices regarding changes to our services or policies
• To detect, prevent, and address technical issues and security threats
• To comply with legal obligations and respond to lawful requests
• To analyze usage patterns and improve user experience across our product suite

5. Google OAuth Integration

Our Services use Google OAuth authentication through Auth0. When you choose to sign in with Google:

• You will be redirected to Google's authentication service
• Google will ask for your permission to share certain profile information with us
• We receive only the information you authorize Google to share
• Google OAuth tokens are securely managed by Auth0 and are not stored directly by our applications
• You can revoke Google's access to your account at any time through your Google account settings

5.1 Google Sign-In Scopes

When you use Google Sign-In, we request access only to basic profile scopes necessary for authentication, including your email address, name, profile picture, and unique Google account identifier (typically via the openid, email, and profile scopes). We do not request access to your Gmail, Google Drive, Calendar, or other Google services unless explicitly disclosed and authorized for a specific feature.

5.2 Limited Use of Google User Data

Our use of information received from Google APIs is limited to providing and improving user-facing features that are prominent in each application's user interface. We use Google user data only to:

• Authenticate your identity and create or manage your account
• Display your name and profile picture within the Service you use
• Communicate with you about your account and the Service
• Maintain the security and integrity of the Service

We do not use Google user data to:

• Serve advertisements, including retargeting or personalized advertising
• Sell Google user data to third parties, data brokers, or information resellers
• Determine creditworthiness or for lending purposes
• Build unrelated user profile databases
• Any purpose unrelated to providing or improving authentication and account features in our Services

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5.3 Revoking Access and Deleting Google Data

You may revoke our access to your Google account at any time through your Google Account permissions page. You may also request deletion of data associated with your account by contacting us using the information in Section 14. Upon a verified request, we will delete or de-identify your personal information within a reasonable period, subject to legal retention requirements.

6. Data Sharing and Third-Party Services

We do not sell your personal information. We do not sell, rent, or trade personal information or Google user data to third parties for monetary or other valuable consideration. We share information only as described in this section with service providers who process data on our behalf under contractual obligations.

6.1 Third-Party Service Providers

We work with trusted third-party service providers to operate our Services:

• Auth0: For authentication and identity management services, including Google OAuth integration
• Google: For OAuth authentication services and user profile information
• Cloud Storage Providers: For secure data storage and backup services
• Hosting and Infrastructure: For application hosting and database services

These service providers are contractually obligated to protect your information and use it only for the purposes specified in our agreements with them.

6.2 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests, such as:

• Compliance with court orders, subpoenas, or legal processes
• Protection of our rights, property, or safety
• Prevention of fraud or illegal activities
• Compliance with applicable laws and regulations

6.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change in ownership or control.

7. Data Security

We implement industry-standard security measures to protect your information:

• Encryption of data in transit using SSL/TLS protocols
• Encryption of sensitive data at rest
• Regular security audits and vulnerability assessments
• Access controls and authentication requirements
• Secure authentication through Auth0 with OAuth 2.0 protocols
• Regular backups and disaster recovery procedures

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

8. User Rights

You have the following rights regarding your personal information:

8.1 Access

You have the right to access the personal information we hold about you through your account settings or by contacting us.

8.2 Correction

You can update and correct your account information at any time through your account settings within the Service you use.

8.3 Deletion

You may request deletion of your account and associated data by contacting us. Note that certain information may be retained as required by law or for legitimate business purposes.

8.4 Data Portability

You have the right to request a copy of your data in a machine-readable format.

8.5 Objection and Restriction

You may object to certain processing of your information or request restriction of processing under applicable data protection laws.

9. Cookies and Tracking Technologies

Our Services and websites use cookies and similar tracking technologies to enhance your experience:

• Authentication Cookies: Required for maintaining your login session
• Preference Cookies: To remember your settings and preferences
• Analytics Cookies: To understand how you use our services and improve functionality
• Security Cookies: To protect against fraudulent activity and ensure system security

You can control cookies through your browser settings. However, disabling certain cookies may limit your ability to use some features of our Services.

10. Data Retention

We retain your information for as long as necessary to provide our Services and fulfill the purposes described in this Privacy Policy. Specifically:

• Account information is retained while your account is active and for a reasonable period after account closure
• Business and client data is retained according to your organization's data retention policies and applicable legal requirements
• Financial records are retained as required by applicable accounting and tax laws
• Authentication data is retained only as long as necessary for account security

Upon account deletion, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

11. Children's Privacy

Our Services are B2B products designed for businesses and professionals. They are not directed to individuals under the age of 18, and we do not knowingly collect personal information from children under 18 years of age. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using our Services, you consent to the transfer of your information to these countries. We take appropriate safeguards to ensure your information receives adequate protection in accordance with this Privacy Policy.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated Privacy Policy on this page with a new "Last Updated" date
• Sending an email notification to your registered email address
• Displaying a prominent notice within the affected application

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For privacy-specific inquiries, please include "Privacy Policy Inquiry" and the name of the Service you use in the subject line of your email.