Privacy notice

This is a template. Have it reviewed by counsel before going live.

Uploaded CSV files

CSV files you upload are processed in memory and held only in an encrypted, temporary workspace tied to your account. They are not saved to our database, are not visible to other users, and are deleted automatically when you sign out, end your session, or after a period of inactivity.

Information we keep

We keep your account details, company information, order and payment status, the final confirmed version of each record you complete, and security audit logs.

Call log

For every call made from the call desk we keep a call log entry: who made the call, the Contact ID and store name, start and end time, the outcome and any notes the caller typed. Administrators can view and export the call log. No other CSV data is kept.

Payments

Card and bank details are entered directly on our PCI DSS-compliant payment processor's page. We never receive or store full card numbers or security codes.

Shared forms

Forms you share use a private, unguessable link that stops working once the form is submitted or your session ends. Recipients can see and complete the information on the form, including the billing details, but never payment card data.