SUMMIT EXTERIOR SERVICES
Summit Desk privacy notice
Application data handling · version October 21, 2026.
Who operates the app
Summit Exterior Services operates Summit Desk for its invited team. App and privacy contact: kwesi841@gmail.com.
Information used
Google sign-in supplies the account email, name, and stable account identifier needed to check the owner-managed access list. The app stores session and security records. Company records may contain customer and business-contact details, site and scope information, activity notes, quotes, documents, job photographs and captions, and owner-recorded job/payment evidence. Only owner-selected Google files are available to the integration.
How information is used
The app uses this information for account access, assigned work, quote preparation and owner approval, document controls, reference reading, and operational accountability. It does not send marketing messages automatically, sell Google user data, or provide advertising or AI-model-training functionality.
Storage and access
Company records, controlled documents, job images and private database backup copies are stored in owner-controlled Google files and folders. Image uploads are decoded and re-encoded to strip embedded metadata before storage. The hosted application runs on Render and processes information to provide these functions. Application credentials are stored as server secrets. HTTPS, authenticated routes, role checks, assignment checks, and document-version checks restrict access; these controls do not imply that any system is risk-free. Google and Render process data as service providers under their applicable terms.
Sharing
The app makes role-appropriate information available to authorized Summit users. Private estimator costs and approval controls remain owner-only. Original Google sharing is not made public by the reference library. When a sending mailbox is configured, a team member can explicitly send the exact owner-released proposal to its approved recipient; otherwise delivery uses existing company tools. A recipient of a private photo-request link can upload bounded images until the link expires or is closed, but cannot read company records or existing images. Uploaded photos remain internal evidence unless separately selected and approved for a customer document. Applicable legal obligations may also require disclosure.
Retention and requests
The app does not automatically expire business records. Records remain in owner-controlled storage until the owner deletes them under Summit’s retention decisions. Removing account access can revoke sessions without deleting business history. Contact the owner to request access correction, removal, or review of retained information; applicable business and legal retention needs may affect a request. The owner can revoke the Google integration through Google Account connections, which stops future access but does not delete existing records.
Google API data
Summit Desk’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. The integration requests selected-file Drive access; employee sign-in requests basic identity access. Changes to this notice should be reviewed and published by the owner.