Sample legal document
Privacy Policy
1. Scope and roles
This policy describes personal data processed through Tauri Proโs websites and cloud service. Tauri Pro generally acts as controller for registration, billing and website data, and as processor for portfolio data submitted by Customer organizations.
2. Data collected
- Identity and contact data, including name, work email and organization.
- Authentication, role, invitation and access-log data.
- Subscription, invoice and transaction references from Stripe.
- Usage, device, support and security-event data.
- Customer content, project data and employee tracking data configured by the Customer.
3. Purposes and legal bases
Data may be used to create organizations, authenticate Users, provide and secure services, process payments, deliver support, comply with law and improve the product. Applicable legal bases may include contract performance, legitimate interests, legal obligations and consent where required.
4. Providers and sharing
Data may be shared with vetted hosting, analytics, communications, payment and identity providers, including Stripe and selected OAuth providers. Customer administrators can access data and activity within their organization. A current subprocessor list should be published before launch.
5. Retention and deletion
Data is retained only as needed for the service, security, legal and financial obligations. Organizations with no activity for six months may be deleted after notice. Details and export windows appear in the Data Deletion Rules.
6. Rights and choices
Depending on location, individuals may request access, correction, deletion, restriction, portability or objection, and may complain to a supervisory authority. Requests concerning Customer-controlled portfolio data should normally be directed to that Customer organization.
7. International transfers and security
Where data crosses borders, Tauri Pro should implement an approved transfer mechanism such as standard contractual clauses. Technical and organizational controls should include encryption in transit, access controls, logging, backups and incident response.
8. Contact
Insert Tauri Proโs privacy contact, controller identity, address, data-protection representative and supervisory authority information before publication.