1. Information you provide
Depending on the features you use, information may include account name and email, business name and contact details, staff invitations and roles, customer and supplier records, school or member records, transactions, tasks, uploaded images, and other records entered by authorised workspace users.
2. How information is used
Information is used to authenticate users, create and operate workspaces, provide business features, process invitations, display authorised records, support troubleshooting, protect the service, and maintain security and audit records where configured. Optional profile details should be provided only when needed.
3. Access and security
Workspace data should be protected through authentication, tenant-scoped database policies, role-based permissions and secure invitation workflows. Owners should give staff only the permissions needed for their duties. No system can guarantee absolute security, so users should protect credentials, report suspected exposure, and avoid sharing sensitive records through public links.
4. Service providers and transfers
The app may rely on hosting, authentication, database, storage, email and app-distribution providers. These providers may process information to deliver the service under their own terms and configurations. The final production policy should name the actual providers, processing locations and relevant transfer safeguards.
5. Retention and deletion
Information should be kept only as long as needed for the service, business obligations, security, dispute handling or legal requirements. Workspace owners should follow applicable recordkeeping duties. Account deletion, export and workspace closure procedures should be documented and verified before launch; contact the service operator for current requests and procedures.
6. Children's, education, health and financial information
Use extra care with information about children, learners, patients, financial members and other people who may be vulnerable. Collect only what is necessary, obtain any required notices or consents, restrict access to authorised roles, and follow applicable laws and organisational policies. Do not enter sensitive information unless the relevant feature and protections are approved for that use.
7. Your choices and contact
Depending on applicable law and the available features, individuals may have rights to access, correct, export, restrict or request deletion of personal information. The verified service operator should publish a privacy contact and explain how to submit such requests. Add the operator's legal name and contact details here before public commercial launch.