Service privacy notice

Data categories

• Account data: email, role, assigned sites and login metadata.
• Site profile data: domain, policy configuration, services, workflow status and owner-entered legal fields.
• Consent evidence: choices, action, selected services, policy/banner versions, page URL, user agent and hashed visitor/IP identifiers.
• Operational data: scanner runs, technical events, billing event summaries and transactional mail logs.

Purposes

Data is processed to operate consent management, generate policy and handoff artifacts, enforce security and tenant isolation, support billing/license state, troubleshoot integration issues and maintain audit evidence.

Retention

Operational retention is configurable. Current baseline: technical events 90 days, scanner runs 180 days, acquisition events 90 days. Consent records remain available for customer evidence until exported, deleted or otherwise handled according to the customer agreement.