Privacy Policy
Last updated: placeholder — finalised before public launch.
This policy is a structural template. Company identity, registration details and contact addresses are placeholders until the final legal entity is established. No fields have been invented.
Data controller
[Legal entity name], [registered address], [company number]. Contact: [privacy contact email].
What we collect
- Account data: name, business email, hashed password.
- Business memory content you enter or upload (contracts, records, documents).
- Operational metadata: audit logs, sign-in history, product analytics events.
Why we process it
- To provide the service (contract performance).
- To secure accounts and prevent abuse (legitimate interests).
- To send transactional email such as verification, alerts and billing notices (contract performance).
Retention & deletion
Business data is retained while your account is active. After account deletion requests, data is deleted or anonymised according to configured retention requirements; backups age out on their normal schedule.
Your rights
Access, export, rectification and deletion of your data are supported in-product (Settings → Data). You may also contact [privacy contact email].
Processors
Hosting, database, storage, payment and email providers act as processors. A current list is maintained in our Data Processing information at /data-processing (placeholder).
Cookies
Essential cookies keep you signed in. Non-essential cookies load only after consent — see the Cookies page.