Version 1.1 | Effective Date: November 1, 2025 | Last Updated: November 5, 2026
This Privacy Policy explains how SUNAGO Group L.L.C-FZ ("SUNAGO", "we", "our", "us") collects, stores, and uses information when you or your organisation use our digital platforms, tools, and websites, including SUNAGO Matrix and all other SUNAGO systems.
It applies to all business partners, clients, and authorised users worldwide.
We collect only information necessary to provide and improve our services. This may include:
Business contact information such as name, email address, company name, role, and country.
Account details, login credentials, and authentication data.
Billing and subscription data processed through Stripe or similar providers.
Usage information such as system activity logs, analytics, and performance metrics.
Content or project data uploaded by users in the normal course of business.
Technical information such as IP address, browser type, operating system, and device identifiers.
Cookies and similar technologies used for essential functionality, security, and aggregated analytics.
Where required by law, you will be notified before any non-essential cookies are placed.
We use collected information to:
Create and manage user accounts and partner profiles.
Deliver, maintain, and improve our software and services.
Process payments, invoices, and subscription renewals.
Provide support and communicate about system updates or changes.
Analyse usage trends to enhance performance and reliability.
Comply with legal obligations and enforce our Terms & Conditions.
Communicate with you via email, phone, WhatsApp, Microsoft Teams, or other approved channels as appropriate.
We process data based on one or more of the following legal grounds:
Performance of a contract or preparation for entering into one.
Legitimate business interests in providing, securing, and improving our services.
Compliance with legal or regulatory obligations.
Consent, where required (for example, certain marketing communications).
SUNAGO uses reputable global cloud and infrastructure providers to store and process data securely.
We implement appropriate technical and organisational measures to protect information against loss, misuse, unauthorised access, disclosure, alteration, or destruction.
Although we currently host data through third-party providers, the exact storage location may vary (EU, UAE, or other regions). Wherever processed, SUNAGO applies GDPR-equivalent protection standards.
We may share limited data with trusted third parties who support our operations, including:
Payment processors such as Stripe;
IT, hosting, and analytics providers;
Communication and collaboration tools (for example, email, WhatsApp, Teams, Zoho, or similar).
All third parties are bound by confidentiality and data-protection obligations consistent with this Policy.
Data may be transferred between the UAE, EU, and other countries where our partners operate. SUNAGO ensures such transfers are protected by contractual or other recognised safeguards.
Each user can choose to connect their own Microsoft 365 account or Google account to SUNAGO Matrix. Nothing is connected unless the user does it, and each use is switched on or off by the user on the page My connections. A workspace administrator can also switch calendar time suggestions off for the whole workspace.
Google Calendar (permission calendar.events.readonly): the start and end time of events in the user's primary calendar, the email addresses of the attendees, the event title and, for meetings shown in the CRM, the location. We do not read event descriptions, attachments or any other Google data. We do not use Gmail.
Microsoft 365 (permissions Calendars.Read, Mail.Read and Mail.Send): calendar events in the same way as above, and for mails to and from people in the CRM, the sender, recipients, subject and time. The text of a mail is read only when the user clicks "Create from a mail" on that mail, and only what the user confirms is kept. Mail written in the CRM is sent from the user's own mailbox.
Time suggestions: meetings in the user's calendar are shown to that user as suggested time entries on their timesheet, with the meeting title. When the user approves a suggestion, the title is saved as the note on the time entry. When the user dismisses it, the title is deleted.
CRM: meetings and mails with people who are already in the CRM are shown on that contact, company, lead or deal. Meetings and mails with nobody from the CRM are not kept.
We do not sell, rent or share data from Google or Microsoft with anyone, and we do not use it for advertising.
We do not use it to train AI or machine learning models, and we do not send it to AI services.
People at SUNAGO do not read it, except with the user's permission, to investigate a security issue, or where the law requires it.
The access keys we receive from Google and Microsoft are stored encrypted and are only used by our servers to read the data described above.
When a user disconnects, the access keys are deleted at once and we stop reading. Open time suggestions from that calendar are deleted when the user switches time suggestions off or disconnects. Meetings and mails that were already added to the CRM stay in the workspace's CRM, as part of the customer record, until the workspace deletes them.
A user can also remove SUNAGO Matrix's access from their Google account at any time at myaccount.google.com/permissions.
SUNAGO Matrix's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We retain data for as long as your account or partnership remains active.
After termination or expiry, data will be deleted or anonymised within 90 days, unless otherwise agreed in writing (for example, if a partner requests a temporary "on-hold" period).
We may retain records for legal, accounting, or compliance purposes where required.
Depending on applicable law, you may have the right to:
Access a copy of your data.
Request correction or deletion of inaccurate information.
Object to or restrict certain types of processing.
Request data export or portability, where technically feasible.
To exercise any of these rights, please contact us at sunago@sunago-group.com.
We may need to verify your identity before processing your request.
We use cookies and similar tools to operate our platforms, secure sessions, and measure performance.
Essential cookies cannot be disabled. You can manage non-essential cookies through your browser settings or any on-site cookie banner when implemented.
All privacy enquiries, requests, or concerns should be directed to:
SUNAGO Group L.L.C-FZ
Meydan Grandstand, 6th Floor, Meydan Road, Nad Al Sheba, Dubai, UAE
Email: sunago@sunago-group.com
SUNAGO complies with the UAE Personal Data Protection Law (PDPL) and aligns its practices with the principles of the EU General Data Protection Regulation (GDPR).
Any dispute related to this Policy shall be governed by UAE law and subject to the exclusive jurisdiction of the courts of Dubai.
We may update this Privacy Policy to reflect changes in technology, regulations, or our services.
The effective date above indicates the latest revision. Continued use of SUNAGO platforms after updates constitutes acceptance of the revised Policy.