Privacy Policy

Markaitek Orchestrator ("Orchestrator", "we") is a revenue-operations orchestration SaaS operated by Markaitek. This policy describes the data we process and how we protect it.

Data we process

• Account: name, email, organization.
• CRM data you enter: contacts, companies, interactions, appointments.
• Google data (if you connect your account): see the dedicated section.
• Technical data: logs, IP address, browser type (security and diagnostics).

Google API data

With your explicit consent, Orchestrator accesses Google services via OAuth, with minimal scopes:

• Google Calendar (calendar): read your availability and create/manage appointments scheduled by your agents.
• Gmail — send only (gmail.send): send follow-up emails on your behalf triggered by your agents. We do not read your inbox.

Limited Use. Orchestrator's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. We never use Google data for advertising, and we do not sell it or transfer it to third parties except to provide the service you requested, for security reasons, or where required by law.

Microsoft 365 data

With your explicit consent (Microsoft OAuth), Orchestrator accesses Microsoft 365 with minimal scopes:

• Calendar: read your availability and create/manage appointments scheduled by your agents.
• Outlook email — send: send emails on your behalf that you trigger. We do not read your inbox.
• Teams meetings: create meeting links for appointments.

Microsoft tokens are encrypted at rest and transmitted only over TLS. We never use this data for advertising and do not sell it. You can revoke access in your Microsoft account at any time.

Sign in with Apple

Orchestrator offers Apple sign-in. When you sign in with Apple, we receive a unique identifier and, with your consent, your name and email — only to authenticate and link your account. If you use Apple's Hide My Email option, you share a private relay address (@privaterelay.appleid.com); since Orchestrator access is limited to accounts provisioned by your organization, you must use the email tied to your Orchestrator account (Google and Microsoft work the same way). We never use Apple data for advertising and never sell it.

QuickBooks (Intuit) data

If you connect QuickBooks (Intuit OAuth 2.0, scope com.intuit.quickbooks.accounting), Orchestrator accesses your QuickBooks company solely for billing: customers, products/services, invoices and payment status.

Financial data protection. QuickBooks OAuth tokens and any associated data are encrypted at rest and exchanged only over TLS 1.2+. We never use your QuickBooks data for advertising and do not sell or transfer it to third parties, except to provide the billing service you configured or where required by law. You can disconnect QuickBooks at any time from Integrations, or revoke access in your Intuit account.

PandaDoc data

If you connect PandaDoc (API key), Orchestrator accesses your documents, templates and pricing tables to generate, send and sync your contracts and quotes. The API key is encrypted at rest. This data is used only to provide the contracts feature — no sale, no advertising use. You can remove the key at any time in Integrations.

How we use data

Only to provide and improve the service: place/receive calls, respond via chat, schedule appointments, send the communications you configure, manage billing, and maintain CRM history. We do not train general AI models with your integration data (Google, Microsoft, QuickBooks, PandaDoc).

Sharing

We share data only with sub-processors necessary for the service (e.g. Twilio for telephony, Google and Microsoft for calendar/email, Intuit/QuickBooks for billing, PandaDoc for contracts, our hosting provider), bound by confidentiality commitments. We do not give any third party access to your QuickBooks data, and we only export/store it for the functional operation of the app. No data sales.

Retention and security

Data is encrypted in transit and at rest. Call recordings are deleted after 30 days. You may request deletion of your data at any time.

Your rights

Under Quebec's Law 25 and CASL, you may access, correct or delete your data, and withdraw consent. You can revoke Google access at any time via your Google account permissions.

Contact

Questions or requests: support@markaitek.com