Privacy policy

Tested with: Draft · not yet in force

What the policy will cover

Account data we process to run the service: name, email, organization, billing details (held by Stripe), IP addresses and audit events. Retained for the life of the account plus the audit retention period.
Customer data inside your instances: processed only on your instructions as a processor (and as a Business Associate under a BAA for secure placement). Never analysed, never used for training, never sold.
Cookies and analytics: the website and portal use first-party, privacy-preserving analytics without cross-site tracking; the theme preference is stored in your browser only.
Sub-processors: listed on the sub-processors page with 30 days’ notice of changes.
Your rights: access, correction, deletion and portability requests to [email protected]; response within 30 days.
Data residency: instance data stays in the region you choose; HIPAA orgs pin a region and backups stay in-country.