Privacy policy

This policy covers this website and the platform. It explains what we collect as the company you buy from, and separately what we handle on your behalf when your organization uses the software.

Two different roles

For your own account and billing details, we decide how the data is used, so we are the controller. For the data your organization puts into its workspace, including your customers' details, you decide, and we process it on your instructions. This section matters if you are working out who is responsible for what.

What we collect about you

• Account details: name, work email, phone and organization, so we can create and support your workspace.
• Enquiries: what you send us through the contact form or by email, together with the campaign, referrer and landing page that brought you, so we know which of our own efforts are worth continuing.
• Billing: subscription status and payment records. Card details are handled by our payment processor and never reach our servers.
• Usage: pages viewed on this site, and operational logs from the platform, which we use to keep it working and to investigate problems.

What we do not do

We do not sell personal data. We do not share it with advertisers. We do not use one customer's workspace data to serve another customer, to train models, or for anything other than running the service for that customer.

Cookies

We use a small number of cookies: one to keep you signed in, one to remember which organization you are working in, and one to tie a website visit to an enquiry so we can tell where it came from. If analytics are enabled for this site, those scripts are named in the page source and set their own cookies.

Data in your workspace

Your workspace data is isolated from every other organization at the database level, not only in the application. Our staff do not browse it in the ordinary course of business; access for support is limited to what is needed to answer a request, and administrative actions are recorded in an audit trail.

Processors

We rely on a small set of providers to run the service: hosting and database infrastructure, email delivery, payment processing and, where you enable it, messaging. Each is bound to handle data only as instructed. Where your organization connects its own accounts, those providers are yours and their terms apply to that traffic.

Retention

We keep workspace data for as long as your subscription is active. After termination it is retained for a limited wind-down period so you can export it, then deleted. Billing records are kept as long as the law requires.

Your rights

Depending on where you live you may have the right to access, correct, export or delete personal data we hold about you, and to object to certain processing. Write to us and we will respond. If your data sits inside a customer's workspace rather than in our own records, we will point you to that organization, which is the right party to ask.

Security

Data is encrypted in transit. Access to production systems is restricted and logged. If we discover a breach affecting your data we will tell you promptly and tell you what we know.

Changes

We may update this policy. Material changes will be announced before they take effect, and the date at the top of this page always reflects the current version.

Contact

Privacy questions and rights requests go to our support address.