01 — Information We Collect

We collect information in a few different ways: directly from you, automatically as you use the Service, and from trusted third parties that help us operate and secure it. The categories below describe what we collect and where it comes from.

Information you provide to us

You share this information when you create an account, configure the platform, or contact our team.

• Account and profile details such as your name, work email, and company.
• Authentication and access credentials used to sign in.
• Support requests, feedback, and other communications.
• Billing and transaction details where applicable.

Information we collect automatically

As you navigate and use the Service, certain technical information is collected by default.

• Device, browser, and operating system information.
• Log and usage data, including pages viewed and actions taken.
• Approximate location derived from your IP address.
• Data from cookies and similar technologies.

Information from third parties

We may also receive information from identity providers and single sign-on services you connect, from security and IAM tools you integrate, and from publicly or commercially available sources. We combine this with the information above to keep your account secure and to improve the Service.

02 — How We Use Your Information

We use the information we collect to run the Service reliably, keep it secure, and make it better over time. We process your information only for the purposes described in this Policy or for other compatible purposes you would reasonably expect.

Specifically, we use information to:

• Provide, operate, maintain, and improve the Service.
• Authenticate users and protect the security of accounts.
• Detect, investigate, and prevent fraud and security incidents.
• Send administrative messages, alerts, and support responses.
• Analyze usage and trends to develop new features.
• Comply with legal obligations and enforce our terms.

We do not use your personal data for unrelated purposes without first letting you know and, where required, obtaining your consent.

03 — Legal Bases for Processing

Where data protection law applies, we only process personal data when we have a valid legal basis to do so. The basis we rely on depends on the context in which we collect and use your information.

• Consent — where you have given us permission to process your data.
• Contract — where processing is necessary to provide the Service to you.
• Legitimate interests — to operate, secure, and improve the Service.
• Legal obligation — where we must process data to comply with the law.

04 — Sharing and Disclosure

We treat your information as confidential and we do not sell it. We share information only where it is necessary to provide the Service, comply with the law, or protect our users and the public.

We may share information with:

• Service providers and subprocessors acting on our behalf.
• Parties involved in a merger, acquisition, or asset sale.
• Law enforcement or regulators when legally required.
• Other parties when you have given your consent.

When we engage service providers, we require them to protect your information and to use it only for the purposes we specify.

05 — Data Retention

We retain personal data for as long as necessary to provide the Service and fulfill the purposes described in this Policy. The exact retention period depends on the type of data, the reason we hold it, and any legal or contractual obligations that apply.

When personal data is no longer needed, we securely delete, anonymize, or aggregate it so that it can no longer be associated with you. Residual copies in backups are removed on a rolling schedule.

06 — Data Security

Protecting your information is central to what we do. We maintain administrative, technical, and organizational measures designed to protect personal data against unauthorized access, loss, misuse, or alteration.

These measures include:

• Encryption of data in transit and at rest.
• Access controls based on least-privilege principles.
• Continuous monitoring, logging, and alerting.
• Regular security testing, reviews, and audits.

While we work hard to protect your information, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

07 — Your Rights and Choices

Depending on where you live, you may have certain rights over your personal data. We are committed to honoring these rights and making them straightforward to exercise.

These rights may include the ability to:

1. Access a copy of the personal data we hold about you.
2. Correct inaccurate or incomplete information.
3. Request deletion of your personal data.
4. Receive your data in a portable, machine-readable format.
5. Object to or restrict certain processing.
6. Withdraw consent you have previously given.
7. Lodge a complaint with a supervisory authority.

To exercise any of these rights, contact us using the details below. We will respond within the timeframes required by applicable law and will not charge a fee unless your request is excessive or repetitive.

08 — International Data Transfers

We operate globally, which means your information may be transferred to, stored in, and processed in countries other than the one in which you reside. These countries may have data protection laws that differ from those in your jurisdiction.

Where we transfer personal data internationally, we put appropriate safeguards in place, such as standard contractual clauses, to ensure your information remains protected wherever it is processed.

09 — Cookies and Tracking

We use cookies and similar technologies to operate the Service, remember your preferences, and understand how the Service is used. Cookies are small files stored on your device that help us recognize you and improve your experience.

The cookies we use generally fall into three categories:

• Essential — required for core functionality and security.
• Analytics — help us understand how the Service is used.
• Preference — remember your settings and choices.

You can manage your preferences through your browser settings at any time, though some features may not function properly without certain cookies.

10 — Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you through the Service or by other reasonable means and update the date at the top of this page.

We encourage you to review this Policy periodically to stay informed about how we protect your information.