Privacy Policy

EnviroDesk is a web application run by Innovative Environmental Solutions Inc. (“IES”, “we”, “us”), an environmental consulting firm based in Wisconsin. This policy explains what information EnviroDesk collects, how we use it, who can see it, and the choices you have. It covers EnviroDesk at iesenvirodesk.com and the emails EnviroDesk sends.

EnviroDesk is a business tool. Most people use it through a company that IES works with or that registered on its own. That company controls who joins its workspace and what they can see. Where this policy says your company can see or manage your information, questions about that should go to your company's administrators.

Consulting services IES provides outside EnviroDesk, and IES's own website, are not covered by this policy.

Account details. Your first and last name, email address, and password. We store the password only as a secure hash. If you add them, we also store your job title and office and mobile phone numbers.

Google or Microsoft sign-in. If you sign in with Google or Microsoft, we receive your name, your email address, whether that address is verified, and a unique account identifier from the provider. That is all we ask for. We never receive your Google or Microsoft password, and we do not access your email, calendar, contacts, or files through sign-in.

Information your company adds about you. When a company administrator or IES staff invites you, they enter your name and email address, and may set your role and job title.

Company and project content. The company you belong to, your role, the teams you join, and the projects, tasks, notes, annotations, questions, documents, purchase orders, and other content you or your company add.

Files. Documents you or your company upload are stored in a Microsoft SharePoint site that IES manages for your company.

Security records. Two-step sign-in settings and secrets (stored encrypted), records of sign-ins and failed sign-ins with the date, time, and IP address, and a log of security-relevant actions such as file access being granted or revoked.

Usage information. When you use EnviroDesk we record which pages and features you use, the records you open or create, which buttons you click, and the date, time, and IP address of those actions. For people who are not IES staff, we also record how many minutes you were active in the app each day. We do not use third-party analytics tools or advertising trackers.

Email preferences. Whether you have opted in to product news from IES, and the date and time you opted in or out.

Messages you send us.Questions you send through “Ask IES”, support requests, and other correspondence.

We do not collect payment card details (paid work is arranged by purchase order), precise location, biometric data, or government identification numbers, and we do not ask for sensitive personal information.

• To run EnviroDesk: create and sign in to your account, show your company's data, and provide the features you use.
• To keep EnviroDesk secure: detect and investigate unauthorized access, abuse, and bugs.
• To send account email such as email verification, password resets, sign-in codes, invitations, and updates about projects, purchase orders, and company requests.
• To send product news and tips from IES, only if you opt in. Every one of those emails has an unsubscribe link, and you can turn them off in Settings.
• To provide and support IES consulting services that you or your company ask for.
• To understand how EnviroDesk is used, mostly in aggregate, so we can fix problems and improve it.
• To comply with the law and enforce our Terms of Use.

We do not sell your personal information. We do not share it for advertising, and we do not use it for advertising or profiling.

Sign-in with Google or Microsoft is optional. We use the information we receive from the provider only to create your EnviroDesk account, match it to an existing account with the same verified email address, sign you in, and show your name in the app. We do not share it with anyone outside IES except the service providers that host EnviroDesk, and we do not use it for any other purpose.

You can disconnect Google or Microsoft sign-in in Settings at any time. You can also remove EnviroDesk's access from your Google or Microsoft account settings. If you disconnect, you can still sign in with your EnviroDesk password.

Google's use of information is governed by Google's privacy policy, and Microsoft's by Microsoft's privacy statement.

People in your company and teams.Your name, email address, title, and the content you add can be seen by other people in your company according to the roles and permissions your company's administrators set. Content you add to a team can be seen by the other members of that team, including people from other companies.

IES staff.IES administrators and consultants can see your account details and your company's content to set up and support your company, provide consulting services, and keep EnviroDesk secure. Only IES administrators can see usage and security records.

Service providers. We use a small number of companies to run EnviroDesk. They process information only to provide their service to us:

• Railway (application and database hosting)
• Vercel (website hosting)
• Resend (email delivery)
• Microsoft (SharePoint file storage, and Microsoft sign-in if you use it)
• Google (Google sign-in if you use it)

Legal and safety. We may disclose information if required by law, subpoena, or court order, or when we believe in good faith that disclosure is needed to protect the rights, property, or safety of IES, our users, or the public.

Business transfers. If IES is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will tell you before your information becomes subject to a different privacy policy.

With your direction. We share information with others when you ask us to.

EnviroDesk uses one cookie to keep you signed in. It is set only after you sign in, is not readable by scripts, and expires when your session ends. During Google or Microsoft sign-in we set a short-lived cookie that protects the sign-in from forgery. EnviroDesk also stores a few display preferences, such as whether the sidebar is collapsed, in your browser's local storage.

We do not use advertising cookies or third-party analytics cookies, and we do not allow other companies to collect information about your activity across websites through EnviroDesk. Because we do not track you across other websites, EnviroDesk does not respond to browser “Do Not Track” signals.

We keep your account information while your account is active. When your company removes you, or you ask us to close your account, we deactivate the account.

If you ask us to delete your personal information, we delete or anonymize your account details within 30 days of confirming the request, except for information we need to keep to comply with the law, resolve disputes, or enforce our agreements. Security records and sign-in logs are kept for up to two years for investigation and audit purposes. Copies in routine backups are overwritten on the backup schedule.

Content that belongs to your company, such as projects, documents, and notes, stays with your company after you leave. Your name may remain on records you created, such as notes or tasks, so that the company's history stays intact.

Data is encrypted in transit. Passwords are stored as secure hashes, and two-step sign-in secrets are stored encrypted. Access to production systems is limited to IES staff who need it. No system is perfectly secure, so please use a strong, unique password and turn on two-step sign-in.

If we learn of a security breach that affects your personal information, we will notify you and, where appropriate, your company's administrators, as required by applicable law, including Wisconsin's breach notification statute (Wis. Stat. 134.98).

In the app. You can update your name, title, and phone numbers in Settings, turn product news on or off in Settings, and disconnect Google or Microsoft sign-in in Settings. Every product news email also has an unsubscribe link.

By request. You can ask us to give you a copy of the personal information we hold about you, to correct it, or to delete it, by emailing nickcoffman@the-ies-inc.com. We will confirm that the request came from you, normally by replying to the email address on your account, and respond within 45 days. If we decline a request, we will tell you why, and you can ask us to reconsider by replying to our response.

State privacy laws. Some US states give their residents rights to access, correct, delete, and obtain a copy of their personal information, and to opt out of its sale, of targeted advertising, and of certain profiling. EnviroDesk does not sell personal information, does not use it for targeted advertising, and does not make automated decisions about you that have legal or similarly significant effects. You can exercise the other rights by contacting us as described above. We will not treat you differently for exercising them.

Information your company controls. If you use EnviroDesk through your company, that company controls much of the information about you in its workspace. Depending on the law that applies, some requests may need to go to your company. If you contact us, we will tell you if that is the case and help where we can.

EnviroDesk is a business tool and is not intended for anyone under 18. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us and we will delete it.

EnviroDesk is hosted in the United States and is intended for use in the United States. If you use it from somewhere else, your information will be transferred to and processed in the United States, where privacy laws may differ from those where you live.

When we change this policy, we update the date at the top. If a change materially affects how we use your personal information, we will tell you by email or by notice in the app before it takes effect. If we want to use information from Google or Microsoft sign-in in a new way, we will ask for your consent first. Earlier versions are available from us on request.

Innovative Environmental Solutions Inc.
Wisconsin, USA
Email: nickcoffman@the-ies-inc.com

See also our Terms of Use.