Privacy Policy

YOUR PRIVACY RIGHTS Effective Date: January 1st, 2025 · Last updated: September 30th, 2026 Privacy Policy We'll try to keep this as short as possible with enough detail for you to make an informed decision OK, let's get started! Our privacy policy discloses the privacy practices for eHandshake.com, and applies only to the personally identifiable information collected from you through the web site and how it is used and with whom it may be shared. We tell you the choices available to you regarding the use of your data, and the security procedures in place to protect the misuse of your information, also how you can correct any inaccuracies in the information. Registration In order to use this website, a user must first complete the registration form. During registration a user is required to give certain information (such as name and email address). This information is used to contact you about the products/services on our site in which you have expressed interest. At your option, you may also provide demographic information (such as gender or age) about yourself, but it's not required. Information Collection, Use, and Sharing We are the sole owners of the information collected on this site. We only have access to/collect information you voluntarily give us via email or other direct contact from you. WE WILL NOT sell or rent this information to anyone. (We hate when others do this to us, so we won't do it to you!) We will use your information to respond to you, regarding the reason you contacted us. WE WILL NOT share your information with any third party outside of our organization, other than as necessary to fulfill your request, e.g. to ship an order. Unless you ask us not to, we may contact you via email in the future to tell you about specials, new products or services, or changes to this privacy policy. Your Access to and Control Over Information You may opt out of any future contacts from us at any time. You can do the following at any time by contacting us via the email address or phone number given on our website: • See what data we have about you, if any • Change/correct any data we have about you • Have us delete any data we have about you • Express any concern you have about our use of your data Security We take precautions to protect your information. When you submit sensitive information via the website, your information is protected both online and offline. Wherever we collect sensitive information (such as credit card data), that information is encrypted and transmitted to us in a secure way. You can verify this by looking for a closed lock icon at the bottom of your web browser, or looking for "https" at the beginning of the address of the web page. While we use encryption to protect sensitive information transmitted online, we also protect your information offline. Only employees who need the information to perform a specific job (for example, billing or customer service) are granted access to personally identifiable information. The computers/servers in which we store personally identifiable information are kept in a secure environment. Cookies We use "cookies" on this site. A cookie is a piece of data stored on a site visitor's hard drive to help us improve your access to our site and identify repeat visitors to our site. For instance, when we use a cookie to identify you, you would not have to log in a password more than once, thereby saving time while on our site. Cookies can also enable us to track and target the interests of our users to enhance the experience on our site. Usage of a cookie is in no way linked to any personally identifiable information on our site. Some of our business partners may use cookies on our site (for example, advertisers). However, we have no access to or control over these cookies. Links This web site contains links to other sites. Please be aware that we are not responsible for the content or privacy practices of such other sites. We encourage our users to be aware when they leave our site and to read the privacy statements of any other site that collects personally identifiable information. Sharing We partner with another party to provide specific services. When the user signs up for these services, we will share names, or other contact information that is necessary for the third party to provide these services. These parties are not allowed to use personally identifiable information except for the purpose of providing these services. Surveys & Contests From time-to-time our site requests information via surveys or contests. Participation in these surveys or contests is completely voluntary and you may choose whether or not to participate and therefore disclose this information. Information requested may include contact information (such as name and shipping address), and demographic information (such as zip code, age level). Contact information will be used to notify the winners and award prizes. Survey information will be used for purposes of monitoring or improving the use and satisfaction of this site.

Social Media Integrations

eHandshake allows users to connect their social media accounts (including Facebook, X/Twitter, YouTube, Instagram, and TikTok) to publish professional content directly from our platform. When you connect a social media account, we may access the following information through the platform's login and authorization process: Facebook • Your Facebook user ID (to identify your account) • The list of Facebook Pages you manage (to let you select which Page to post to) • A Page access token (to publish content on your behalf) X (Twitter) • Your X user ID and username (to identify your account) • An access token and refresh token (to publish content on your behalf) YouTube (via Google OAuth) • Everything eHandshake accesses from your Google account for YouTube is listed in the section "Google User Data We Access" below Instagram • Your Instagram user ID (to identify your account) • The list of Instagram Professional accounts linked to your Facebook Pages • An access token (to publish content on your behalf) TikTok • Your TikTok open ID and display name (to identify your account) • An access token and refresh token (to publish video content on your behalf) • We use TikTok's Content Posting API to upload videos you create in our Design Center as posts to your TikTok account How We Use Social Media Data We use the information listed above solely to enable you to publish posts from eHandshake to your selected social media accounts. Your social media credentials, access tokens, and Page tokens are stored securely in our encrypted database and are never sold, shared, or disclosed to any third party. No content is ever posted to your social media accounts without your explicit action — you must write a personal message and click "Post" before anything is published. Data Retention for Social Media Connections When you connect a social media account, we store an access token, refresh token (where applicable), your platform username or display name, and the date of connection. We do not store your social media passwords. Tokens are retained only for as long as your account remains connected. We do not access, store, or process any content from your social media feeds, direct messages, followers lists, or analytics. Disconnecting Your Social Media Accounts You may disconnect any social media account at any time from within the eHandshake Sharing Center. Upon disconnection, all stored access tokens for that platform are immediately invalidated and removed from our database. For YouTube specifically, you may also revoke access directly from your Google Account Permissions page. To request complete deletion of your social media-related data, contact us at support@ehandshake.com. For more information about how each platform handles your data, please review their respective privacy policies: • Facebook: https://www.facebook.com/policy.php • X/Twitter: https://twitter.com/en/privacy • YouTube/Google: https://policies.google.com/privacy • Instagram: https://privacycenter.instagram.com/policy • TikTok: https://www.tiktok.com/legal/privacy-policy

Google User Data We Access

eHandshake accesses Google user data only when you choose to connect a Google service, and only for the two features below. You grant access on Google's own consent screen, and you can remove it at any time. We do not offer "Sign in with Google", and we do not access your Gmail, Google Contacts, Google Calendar, Google Drive or any other Google account data. 1. YouTube — posting your videos (optional) • Permission (OAuth scope) we request: https://www.googleapis.com/auth/youtube.upload ("Manage your YouTube videos") — and no other YouTube scope • Google user data we access: (a) your YouTube channel ID and channel name, read once when you connect, so we can show which channel is connected; (b) the videos you choose to post, which we upload to your channel using the YouTube Data API v3; (c) the view, like and comment counts of the videos you posted through eHandshake, so we can show how your posts are doing in the app • What we do not access: your email address, your other videos, private videos, playlists, subscriptions, comments, watch history, channel analytics or any other YouTube or Google account data • How we use it: only to publish the videos you create in our Design Center to your channel when you click "Post" (as public or unlisted, as you choose), and to show you your posts' view, like and comment counts. Nothing is uploaded without your action • What we store: your channel ID and channel name, an OAuth access token and refresh token, and the ID of each video we uploaded for you. We never see or store your Google password • Sharing: we do not share or sell this data. Videos you post are shown on YouTube according to the visibility you choose • How long we keep it, and deletion: kept only while YouTube is connected. When you disconnect YouTube in the Sharing Center, we revoke our access with Google and delete the tokens and your channel name from our database; only the disconnected channel's ID remains, until you delete your eHandshake account, which deletes it too. Videos already posted stay on your YouTube channel until you remove them there • eHandshake's use of YouTube API Services is subject to the YouTube Terms of Service, YouTube's API Services Terms of Service and the Google Privacy Policy 2. Google Meet — links for team meetings (optional, team captains only) A team captain can choose to let eHandshake create the Google Meet link for each of their team's scheduled meetings. Captains can instead paste a link from any meeting service. • Permission (OAuth scope) we request: https://www.googleapis.com/auth/meetings.space.created — it lets eHandshake create Google Meet meeting spaces and manage only the meeting spaces eHandshake itself created • Google user data we access: only the meeting spaces eHandshake creates for your team's meetings — their meeting link and meeting space identifier, as returned by the Google Meet REST API • What we do not access: your other Google Meet meetings, your Google Calendar, recordings, transcripts, chat messages, participant lists, email, contacts or any other Google account data • How we use it: we create one new meeting space for each scheduled team meeting the captain chose to use Google Meet for, set so that anyone with the link can join • What we store: the meeting link and meeting space identifier, and an OAuth access token and refresh token so we can create upcoming meetings' links on your behalf. We never see or store your Google password • Sharing: the meeting link is shared only with that team's members and the guests the team invites — in the eHandshake app, in meeting confirmation and reminder emails, and in notifications. We do not share or sell anything else • How long we keep it, and deletion: tokens are kept only while Google Meet is connected. When you disconnect (from the Meetings window in the web or mobile app), we delete them from our database and revoke them with Google. They are also deleted if you delete your eHandshake account. Meeting links already created remain Google Meet meetings in your Google account and keep working after you disconnect Removing eHandshake's access Besides disconnecting inside eHandshake, you can remove eHandshake's access to your Google account at any time from your Google Account Permissions page. To ask us to delete any Google-related data, email support@ehandshake.com. Not Google user data We also use Google Maps Platform (Places) to look up publicly listed business information, such as a business's public Google reviews, and a Gmail mailbox that belongs to eHandshake to send our own emails. Neither uses or accesses your Google account.

Google API Services — Limited Use

eHandshake's use and transfer to any other app of information received from Google APIs (including the YouTube Data API and the Google Meet REST API) will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular: • We use Google user data only to provide the features described above, which you choose to use • We do not transfer Google user data to others, except as necessary to provide those features, to comply with applicable law, or as part of a merger or acquisition with your notice • We do not use Google user data for advertising, and we do not sell it • We do not use Google user data to develop, improve, or train generalized artificial intelligence or machine learning models • We do not send Google user data — raw, aggregated, anonymized or derived — to any artificial intelligence or machine learning service. eHandshake's AI writing features use OpenAI's API, and they process only text you type into eHandshake and publicly available business information; they never receive your YouTube or Google Meet data. We do not use any self-hosted or offline AI models • People at eHandshake do not read Google user data, except with your permission, for security purposes, to comply with law, or when it has been aggregated and anonymized for internal operations

Team Meetings

Teams can schedule meetings in eHandshake. Team members' RSVPs (Going, Maybe, Can't make it) and check-ins are visible to their team. A member can invite a guest to a meeting by sharing an invitation link; a guest who RSVPs gives us their name, email address and, optionally, their business name. A guest's email address is visible only to that team's captain. We use guest information only to confirm the RSVP, send meeting details and reminders for that meeting, and send one follow-up after the meeting. Every email includes an unsubscribe link. Guests can ask us to delete their information at support@ehandshake.com.

30-Second Elevator Pitch

Team members can record a short video or audio introduction of up to 30 seconds (an "elevator pitch"). Recording is optional and happens only when you choose to record. We use your camera and microphone (or only your microphone, for an audio pitch) solely while you are recording it, and only after you grant your browser or device permission. • Your recording is stored on Amazon Web Services (AWS) servers in the United States, in private storage that is not publicly accessible • It can be watched only by people signed in to eHandshake, through short-lived links, and only while you are a member of at least one team. It never appears on public profile or team pages • If you ask us to draft a script for you, we send your name, job title and business details to our AI provider to write it. The script is saved so you can edit it • You can re-record or delete your pitch at any time from "My 30-second pitch". Recording again replaces the old one, and deleting removes it from our storage. It is also deleted if you delete your account • Members can report a pitch; reports are reviewed by our team

Mobile Application

This policy also covers the eHandshake mobile app for iOS and Android. In addition to the practices described above: Photos & Media When you set a profile picture or create content in the Design Center, you choose photos or videos through your device's photo picker. We access only the files you select. The app uses your device's camera and microphone only when you choose to record your 30-second pitch (see above). It does not access your location or contacts. Push Notifications If you enable notifications, we store a device push token so we can deliver them to you. You can turn notifications off at any time in your device settings. Your Data, In the App You can export a copy of your personal data at any time using "Download my data" in the Help Center, and you can delete your account directly in the app (Settings → Delete Account). Account deletion is identity-verified and permanently removes your profile and associated content. The eHandshake app does not use third-party advertising or cross-app tracking.

Customer Information You Provide

eHandshake lets you build and import a customer list — by typing entries, uploading a spreadsheet, or importing from your Google account — so you can request reviews and share posts with the customers you choose. This information belongs to you. We use it only to provide these features at your direction, and we never sell or rent it. You can edit or remove customer entries at any time, and they are permanently deleted when you delete your account.

Children's Privacy

eHandshake is a tool for businesses and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us at support@ehandshake.com and we will delete it.

Data Deletion Requests

You may request deletion of any or all personal data we hold about you by contacting us at support@ehandshake.com. We will process your request within 30 days. Upon deletion, all associated social media tokens, account connections, and personal information will be permanently removed from our systems. Updates Our Privacy Policy may change from time to time and all updates will be posted on this page. If you feel that we are not abiding by this privacy policy, you should contact us immediately via email at support@ehandshake.com Thanks for reading! (Hope that wasn't too long)