Privacy Policy

Who we are

Legal entity: P23 Africa Ltd (trading as Factory 23)
Registered address: 185 Tower Bridge Rd, London SE1 2UF, United Kingdom
Privacy contact: contact@p23africa.com

Information we collect

• Account information such as name, email address, phone number, job title, and company details.
• Workforce and operational data such as attendance, tasks, visits, routes, and field reports.
• CRM data such as lead and customer contact details, email threads, and outreach activity.
• Location data collected only while a user is actively checked in for work-related activity.
• Files, photos, signatures, and documents uploaded through the platform.
• Usage, security, and diagnostic logs such as IP address, device/browser information, and login activity.

Google account data (Calendar and Gmail)

If you choose to connect your Google account, Factory 23 may access Google Calendar and Gmail data only after you explicitly authorize the connection through Google OAuth. This is used to:

• Sync meetings and calendar events for scheduling inside Factory 23.
• Send CRM follow up emails from your connected mailbox.
• Read and sync CRM-related email threads linked to leads and customers.
• Mark messages as read or move messages to trash when you take those actions in Factory 23.

We do not access your Google account unless you connect it. You can disconnect your Google account at any time from your Factory 23 settings. When disconnected, we stop using your Google access tokens and revoke the connection where supported.

Google user data is used only to provide Factory 23 features you request. We do not sell Google user data and we do not use it for advertising.

Microsoft 365 account data (Outlook mail)

If you choose to connect your Microsoft 365 or Outlook account, Factory 23 may access your mailbox through the Microsoft Graph API only after you explicitly authorize the connection through Microsoft OAuth. This is used to:

• Send CRM follow up emails from your connected mailbox.
• Read and sync CRM-related email threads linked to leads and customers.
• Mark messages as read or move messages to trash when you take those actions in Factory 23.
• Read your basic Microsoft profile so we can identify and display the connected mailbox.

We do not access your Microsoft account unless you connect it. You can disconnect it at any time from your Factory 23 settings. When disconnected, we stop using your Microsoft access tokens and revoke the connection where supported.

Microsoft user data is used only to provide Factory 23 features you request. We do not sell Microsoft user data, we do not use it for advertising, and we do not use it to train AI models.

AI features and Limited Use of Google user data

Factory 23 includes an in-product AI assistant (ELY) and AI-assisted CRM features such as drafting email replies and summarizing customer activity. These features are powered by third-party AI providers that process data on our behalf solely to generate the response you requested inside Factory 23.

Factory 23's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we do not use, transfer, or sell Google Workspace user data — whether raw, aggregated, derived, or anonymized — to develop, train, or improve any foundational or generalized artificial intelligence or machine learning models. Our AI providers are engaged under terms that prohibit them from training their models on data submitted through their APIs. Human beings do not read your Google user data except with your affirmative consent, to investigate security issues or abuse, or where required by law.

How we use personal data

• To provide and operate the Factory 23 platform and its features.
• To authenticate users and secure accounts.
• To support CRM, task management, attendance, reporting, and AI-assisted workflows.
• To send service notifications, support responses, and account-related communications.
• To improve reliability, prevent abuse, and maintain platform security.
• To comply with legal obligations and enforce our terms.

How we share data

We do not sell personal data. We share data only with service providers that help us operate Factory 23, such as cloud hosting, email delivery, mapping, payment processing, analytics, and AI processing providers. These providers are contractually required to protect data and use it only to deliver services to us.

Data retention and security

We retain personal data for as long as your account is active and as needed to provide the Service, resolve disputes, enforce agreements, and meet legal obligations. We use encryption in transit, access controls, and other technical and organizational safeguards to protect personal data.

Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal data, and to request a copy of your data. To exercise these rights, contact hello@p23africa.com.

Children's privacy

Factory 23 is not intended for children under 18, and we do not knowingly collect personal data from children.

Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be published on this page. Material changes will be communicated to customers where appropriate.