Privacy Policy
Scope and Applicability
This Privacy Policy governs the collection, use, retention, and protection of personal information obtained through the use of the service. It applies to all interactions—whether via web, mobile, or API—and to all features, tools, and communications provided. Continued use of the service constitutes acceptance of these terms.
Types of Information Collected
Only the minimal information strictly necessary for core functionality is obtained. This may include identifiers (e.g., usernames), device metadata (e.g., operating system version), and usage metrics (e.g., feature access logs). No sensitive categories (such as health, financial, or biometric data) are requested or stored.
Purpose of Processing
Collected information is used exclusively to:
Ensure system stability and security
Diagnose and resolve technical issues
Enhance performance and optimize user workflows
Provide contextual assistance and non-mandatory feature suggestions
Any processing beyond these purposes triggers explicit notification and consent.
Data Minimization and Retention
Information is retained only as long as necessary to fulfill the purposes above, typically no longer than 24 months from last interaction. Upon expiry, records are either securely purged or irreversibly anonymized. Retention schedules are reviewed annually to align with evolving best practices.
Anonymization and Pseudonymization
Wherever feasible, direct identifiers are replaced with pseudonyms or aggregated into statistics, ensuring that individual users cannot be re-identified without additional separate information. This approach underpins performance analyses and feature-use reporting.
Use of Tracking Technologies
Only essential cookies and diagnostic scripts are deployed to maintain core service functionality and monitor health metrics. Any non-essential analytics or behavioral-tracking components remain inactive unless the user opts in via clear, granular controls.
Security Measures
Data in transit is safeguarded with industry-standard transport layer encryption. At rest, records reside in encrypted storage systems protected by multi-factor access controls, role-based permissions, and continuous intrusion detection. Routine security audits and penetration tests are conducted to identify and mitigate vulnerabilities.
Access and Correction Rights
Users have the right to request access to any personal information associated with their account, to correct inaccuracies, or to request deletion of non-anonymized records. Such requests are processed within 30 days, subject to any overriding legal retention obligations.
Breach Notification
In the unlikely event of unauthorized access affecting user data, notifications will be issued within 72 hours of identifying the breach. Communications will detail the nature of the incident, steps taken to contain it, and recommended user actions.
Changes to this Policy
Updates to this Privacy Policy may occur to reflect changes in legal requirements or improvements in security practices. A notice of material changes will be posted at least 14 days prior to their effective date. Continued use beyond that date signifies acceptance of the revised policy.
Contact and Inquiries
For questions, requests, or concerns regarding this policy, users may submit inquiries through the service’s support channels. All inquiries receive an acknowledgment within five business days and a substantive response as promptly as possible.
