Data handling
Last updated: 2026-06-21
This policy describes how the platform handles company, customer, financial, file, AI-assistant, billing, and operational data for a production business workspace.
The platform may store company profiles, user accounts, customers, leads, estimates, invoices, payments, receipts, files, notes, tasks, reports, subscription records, usage records, audit logs, and AI-assistant command history needed to operate the workspace.
Workspace data is scoped by company. Users should only see records for companies they are authorized to access. Cross-company access, exports, reports, files, and AI tools must respect tenant boundaries.
Hosted providers may process limited data for authentication email, billing, storage, analytics, support, or communication delivery. Secret values, raw payment credentials, and provider tokens must not be shown in the app or stored as plain public records.
AI features may use company and workflow context to draft, summarize, classify, or assist with work. AI output is logged where needed for auditability and remains subject to user review before customer-facing or financial action.
Customers may request export, deletion, or offboarding review. Deletion is handled through a reviewed workflow so billing, retention, legal, tax, backup, and operational obligations can be checked before records are removed.