Privacy Policy
1. Who we are
Teddybase is operated by Orange Teddy Bear ("we", "us"), a private set of applications
running at orangeteddybear.com and its subdomains. Contact:
info@orangeteddybear.com.
2. Scope
This policy covers the Teddybase website, the account portal, the analytics dashboard, and the automation service. It applies to the small number of people who hold an account with us — there is no public sign-up.
3. What we collect
| Category | Why |
|---|---|
| Account details — the information needed to identify you and sign you in, and a record of the devices you sign in from | To give you access to your account and to alert you if someone signs in from a device we have not seen before |
| Website usage — which pages were viewed and when, the approximate region a visit came from, and the general type of browser and device used | To understand how our own sites are used |
| Technical records kept automatically when you use the service | To keep the service running, investigate faults, and prevent abuse |
| Connected accounts — the access you grant when you link an outside account, such as Google, and the data covered by that access | To run the automations you set up |
4. Google user data
When you connect a Google account to the automation service, Google shows you exactly which permissions are requested. We only receive what you approve there.
- Use. Google data is used solely to run the automations set up by the person who connected the account. Nothing else reads it.
- Storage. The access granted by Google is stored in encrypted form, and any Google data an automation touches is kept only as long as that automation needs it, subject to the retention periods below.
- Sharing. We do not sell Google user data, do not transfer it to anyone for advertising, and do not use it to train or improve any AI or machine-learning model. It leaves our systems only where an automation you set up explicitly sends it, and to the service providers described in section 5.
- Limited Use. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
- Revoking access. Delete the connection in the automation service, or revoke it at myaccount.google.com/permissions. Either stops all further access immediately.
5. Service providers
We keep outside involvement to a minimum. We use a provider to host the service, a provider to send account emails such as sign-in alerts and password resets, and a provider that turns a network address into an approximate region for usage statistics. Each receives only what it needs for that task, and none of them may use it for their own purposes. Google is involved only where you have connected a Google account yourself.
6. Retention
- Sign-in sessions expire automatically after a short period of inactivity and are then cleared.
- Usage statistics and technical records are kept only as long as they are useful for reporting and operations, and are removed on a rolling basis.
- Account details are kept until you ask us to delete them.
- Access to a connected account is deleted as soon as that connection is removed or revoked.
7. Cookies
We set one cookie once you sign in, so that the service remembers you are signed in. It is strictly necessary and does nothing else. We set no advertising cookies and run no third-party advertising or tracking scripts.
8. Security
Passwords are stored only in a hashed form and are never readable by us. Traffic is encrypted in transit, access is limited to the operator, and we apply the safeguards we consider appropriate to a service of this size. No system is perfect: we cannot guarantee absolute security, and you use the service on that understanding.
9. Your rights
You can ask us for a copy of your data, ask for it to be corrected, or ask for it to be deleted. Email info@orangeteddybear.com and we will action it within 30 days. Deleting your account removes your account details, your sessions and any connections you have made.
10. Children
The service is not intended for anyone under 16 and we do not knowingly collect their data.
11. Changes
If this policy changes we update the date at the top of this page. Continued use after a change means you accept the updated policy.