Privacy Policy

1. Data we collect

We collect account data (name, work email, company, tenant ID), billing data and usage data (logins, audit trail events, page views). Tenant business data (invoices, POs, employee records) is tenant-owned.

• Account: name, email, tenant subdomain, role and permissions
• Billing: plan, seats, storage and payment metadata (via processor, no card storage)
• Usage: login IP, device, timestamps for audit and security

2. How we use data

To provide the service, authenticate users, enforce RLS/RBAC, bill the tenant, support and improve the product. We do not sell tenant data.

• Service delivery and tenant isolation via RLS
• Security, fraud prevention and audit logging
• Support replies within one business day

3. Tenant data isolation

Each tenant's data is isolated at the database with row-level security (RLS). Platform super admins cannot read tenant business rows without explicit permission. Exports and deletes are tenant-scoped.

4. Security

Encryption in transit (TLS), at-rest encryption, audit trail on Finance/Inventory/CRM, and role-based access. Backups are tenant-isolated. Report incidents to security@dataenabler.com.

5. Your rights

Contact your tenant admin for access/correction/deletion of business data. For account data, email privacy@dataenabler.com. Tenant admins can export or purge company data from tenant.html.

6. Contact

Privacy questions: privacy@dataenabler.com — Support: contact.html — See also Terms of Service.

This template is for demo — replace with counsel-reviewed policy before production.