Privacy policy (draft)

Who is responsible

[Legal entity name], of [registered address], is the controller for data about visitors to this website and about account holders. For the client, employee and prospect data an agency puts into its workspace, the agency is the controller and we act as its processor. [Confirm roles with counsel.]

What we collect

Account data such as name, email address and sign-in details.

Workspace content that you add, such as clients, projects, quotes, invoices, attendance and payroll records, and messages.

Technical data such as device, browser and error reports needed to keep the service working. [List the actual tools used.]

Why we use it, and the legal basis

[For each purpose (providing the service, security, billing, support, product improvement), state the legal basis that applies in your jurisdictions.]

Who we share it with

[List the sub-processors in use, such as hosting, email delivery, payments and AI model providers, with their purpose and location.]

How long we keep it

[Retention periods for account data, workspace content, backups and logs.]

Your rights

Depending on where you live you may have rights to access, correct, delete, export or object to the use of your personal data. Contact us at [privacy contact address] to use them.

International transfers and security

[Where data is stored and the safeguards used for transfers.] Our security page describes how the product protects workspace data.