Privacy Policy
Last updated: [DATE]
This policy explains how [COMPANY LEGAL NAME] ("we", "us") collects and uses information in connection with CleverSync (the "Service").
1. Information we collect
- Account information: name, email address, organization name and a hashed password.
- Billing information: handled by our payment processor; we receive plan and payment status, not full card numbers.
- Connection credentials: OAuth tokens, database passwords and API keys you provide, encrypted at rest with AES-256-GCM.
- Customer Data: records read from and written to the systems you connect, processed to run your pipelines. Exported files and error files are stored until you delete them or close your account.
- Usage data: run history, logs and basic web analytics needed to operate and secure the Service.
2. How we use information
To provide, maintain and support the Service; to send alerts and account notices you configure; to process payments; and to protect the Service against abuse. We do not sell personal information and do not use Customer Data to train models or for advertising.
3. Sharing
We share information only with service providers that help us operate the Service (for example hosting, email delivery and payment processing) under contracts that restrict their use of it, or when required by law. [LIST OF SUBPROCESSORS]
4. Retention
Run history is kept for the period included in your plan. Account data is kept while your account is active and deleted within [N] days after closure, except where we must retain it by law.
5. Security
We use encryption in transit and at rest, access controls and logging. No system is perfectly secure; please notify us at [SECURITY EMAIL] of any suspected vulnerability.
6. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal information. [REGION-SPECIFIC SECTIONS — e.g. GDPR, CCPA — counsel to draft.]
7. Contact
[CONTACT EMAIL AND POSTAL ADDRESS]