GGLOOP

Privacy Policy

Effective and last updated: August 23, 2026

GGLoop is an internal business task-coordination service operated by Gwaltney Group. This policy describes how information is handled by the GGLoop iPhone and Android apps, Home Screen widgets, GGLoop Quick Add Chrome extension, and the GGLoop web service at ggloop.gwaltneygroup.com. GGLoop is available only to approved Gwaltney Group personnel and does not offer public account registration.

Information GGLoop handles

• Workspace identity information: your name and Gwaltney Group email address received through Google Sign-In. GGLoop receives a Google identity token for authentication; it does not receive or store your Google password.
• Task and activity information: task titles, notes, priority, status, assignee, creator, completion and Bump activity, and related timestamps.
• Contact references: when a user links a Follow Up Boss contact to a task, GGLoop may store that contact's Follow Up Boss identifier, name, and email address. GGLoop does not access the device's personal Contacts database.
• Attachments: files that users intentionally select and upload, including file name, type, size, and the associated task.
• Authentication and security information: session information, device label, security logs, and ordinary web-server information such as IP address and request time. An IP address may indicate an approximate location; GGLoop does not request precise location. The iPhone app stores its session credential in Apple's Keychain. The Android app encrypts its session credential with a key held by Android Keystore. The Chrome extension stores an individual, revocable GGLoop session token and its expiration date in Chrome's local extension storage. The server stores one-way hashes of issued session tokens.
• Chrome extension confirmation information: GGLoop Quick Add stores a local confirmation for the most recently created task, including its task number, title, assignee, priority, attachment result, and creation time. This confirmation remains until the user closes it or chooses to add another task.
• Notification information: GGLoop stores each user's Email and Push preferences for task assignment, reassignment, Nudge, and overdue-reminder events. If a user permits push notifications, GGLoop also stores the Apple Push Notification service or Firebase Cloud Messaging device token and delivery status associated with that user's account. Notification permission is optional and GGLoop's core features work without it.

How information is used

GGLoop uses information only to authenticate approved users; create, assign, display, synchronize, and manage work tasks through the app, web service, and Chrome extension; provide the widget; store and display user-selected attachments; search for and open linked business contacts when requested; apply user-specific notification choices; deliver operational email or push notifications when enabled; maintain security; troubleshoot problems; and support authorized users.

Chrome extension disclosures

GGLoop Quick Add has the single purpose of allowing approved Gwaltney Group team members to create and assign GGLoop tasks directly from Chrome. It connects only to ggloop.gwaltneygroup.com to authenticate users, load authorized GGLoop teammate data, search Follow Up Boss contacts through the GGLoop server when the user types a contact reference, create tasks, and upload attachments the user intentionally selects.

The extension does not read browsing history, inspect the content of unrelated websites, inject content scripts, track browsing activity, or use information for advertising. It does not use remotely hosted executable code. All executable JavaScript and CSS are included in the installed extension package; server responses provide data rather than executable code.

GGLoop's use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Sharing and service providers

Task information is available only to authorized Gwaltney Group users according to their role and assignment. GGLoop does not sell personal information, serve advertisements, use advertising identifiers, transfer user data for personalized advertising or credit decisions, or track users across apps or websites.

Information may be processed by service providers only as needed to operate GGLoop:

• Google Workspace and Google Sign-In provide organizational authentication and, when enabled by an administrator, operational email delivery. Google may process identity, device, security, and approximate-location information under its own policies; GGLoop requests only the user's basic profile and email address for sign-in.
• Follow Up Boss provides contact search and contact-link destinations when a user chooses to link a business contact.
• Apple provides iPhone app distribution, Keychain, widgets, Universal Links, and optional Apple push-notification delivery.
• Google provides Android platform services, Android Keystore, app links, and optional Firebase push-notification delivery. Google Play may also provide Android app distribution when GGLoop is installed through Play.
• Hosting and infrastructure providers store and transmit GGLoop's database, attachments, encrypted integration credentials, and operational logs.

Gwaltney Group selects and configures service providers to protect information consistently with this policy and applicable law. Information may also be disclosed when required by law, to protect security or legal rights, or as part of an organizational transaction subject to appropriate safeguards.

Retention and deletion

GGLoop accounts are provisioned and managed by authorized Gwaltney Group administrators. Task records and attachments are retained while needed for team operations and business records, unless an authorized user or administrator deletes them sooner. App and extension sessions and notification tokens are retained until they expire, are revoked, are replaced, or the associated account or device is removed. The Chrome extension's last-task confirmation remains only in local extension storage until the user closes it, chooses to add another task, or removes the extension's stored data. Deleted server information may remain temporarily in routine backups or security logs until those copies are overwritten.

Signing out removes the active GGLoop session from the device but does not automatically delete business records already stored on the server. A user may ask an administrator to correct information, deactivate an account, revoke a session, or delete eligible account data. Requests may be sent to brian@gwaltneygroup.com. Some information may be retained when reasonably necessary for security, legal compliance, dispute resolution, or legitimate business recordkeeping.

Security

GGLoop uses HTTPS transmission, access controls, role and assignment checks, revocable app and extension sessions, server-side token hashing, Apple's Keychain, Android Keystore-backed encryption, Chrome's extension-scoped local storage, and protected server storage. No system can guarantee absolute security, so suspected unauthorized access should be reported promptly.

Children

GGLoop is an employee business tool and is not directed to children.

Changes to this policy

Gwaltney Group may update this policy as GGLoop or its data practices change. The revised policy will be posted at this address with a new effective date.

Contact

Brian Ness
Gwaltney Group
4123 26th Street NW
Rochester, MN 55901
brian@gwaltneygroup.com
507-272-2167