Draft · Not approved for public launch

Privacy Policy

Requires owner and legal review before public launch. This editable draft describes implemented functions; it is not a finalized privacy notice.

Information handled by the application

Account information includes names, email addresses and password hashes. Business workspaces may contain contact details, transactions, inventory, money accounts and uploaded files. Session information supports authentication. Operational logs support troubleshooting.

Use and access

The application uses this information to provide workspace features, enforce permissions and maintain transaction history. Business records are scoped to authorized workspace members. Platform billing administration has separate permissions. Files are served through authorized routes.

Payments and service providers

If enabled, hosted payment processing uses Xendit. The application retains subscription and payment references and does not collect card details directly. The owner must identify the actual hosting, email and payment providers, their processing locations and applicable disclosures before launch.

Cookies

Session and security cookies support sign-in and CSRF protection. No marketing analytics or advertising scripts are included in these public pages.

Owner decisions required

• Identify the operating legal entity and privacy contact.
• Document applicable lawful grounds, retention periods, backup retention and deletion procedures.
• Define request, correction, export and deletion channels, response procedures and incident handling.
• Review international transfers and local privacy obligations with qualified counsel.

Contact details and request procedures are not configured. See the contact page for current availability.