Privacy

An agency using this system is the controller of the personal data it puts into it — its clients, owners, contacts and staff. We are the processor: we hold and process that data on the agency’s instructions and for no purpose of our own.

For the account data of the people who sign up to use the product, and for the information on this marketing site, we are the controller.

• Account data: name, email address, and the agencies a person belongs to.
• Agency data: the clients, owners, contacts, listings, leads and notes an agency enters.
• Operational data: request logs, error reports and an audit trail of actions taken in the system.
• Billing data: held by our payment processor. We never see or store card details.

Each agency’s data is separated in the database itself, not only in application code. Queries run under a database role that cannot read another agency’s rows even if the application asks it to, and that separation is covered by automated tests that fail our build if it stops holding.

• People the agency has invited and approved, according to the roles and visibility the agency configured.
• Our staff, only through an explicit, time-limited support session that is recorded in the agency’s own audit log and notified to its administrator. There is no silent access.
• Our sub-processors, listed below, strictly to provide the service.

We use third parties for hosting, payments, email delivery and push notifications. The current list, and the notice period before it changes, is published in the data processing agreement.

In one region, named in the data processing agreement. We do not move an agency’s data between regions without telling them first.

For as long as the agency’s account is open, plus the retention period the agency has set. Demo environments are deleted automatically six hours after they are created.

If an agency stops paying, its data is not deleted: the workspace becomes read-only and an export stays available.

If an agency holds data about you, that agency is the one to ask — they decide what is held and why. The system supports deleting a client, owner or contact and their history, and records the deletion in the audit log.

If we hold data about you as a controller — an account, or a message sent through this site — write to us and we will answer.

The contact address is published here before launch.