Legal document
Privacy Policy
Version 1.0
Version: 1.0
Controller: [Your legal entity name]
Contact: privacy@indusflo.s.co.tz
1. Scope
This Policy explains how we collect, use, store, and protect personal data when you use Indusflo. For EU/UK data subjects, we describe GDPR-style rights below where applicable.
2. Data we collect
| Category | Examples | Purpose |
|---|---|---|
| Account | Name, email, phone, password hash | Authentication, support |
| Organization | Company name, industry, country | Provisioning, compliance |
| Usage | Logs, IP, device, feature usage | Security, billing, improvement |
| Workforce (your input) | Employee names, attendance you enter | Features you enable |
| Payment | Billing status | Subscriptions |
3. Legal bases
We process data based on: contract, legitimate interests (security, analytics), legal obligation, and consent where required.
4. How we use data
- Provide and secure the multitenant platform
- Provision your dedicated database space
- Send transactional emails
- Comply with law and enforce Terms
We do not sell your personal data.
5. Tenant isolation
Your operational data is stored in a separate database from other customers. Platform staff access is restricted, logged, and limited to support and billing needs.
6. Retention
| Data | Retention |
|---|---|
| Active tenant | While subscription active |
| After cancellation | 6 months (archived), then deleted per offboarding policy |
| Audit logs (platform) | 2 years |
| Backups | Up to 90 days rolling |
7. Your rights
You may request: access, correction, deletion, restriction, portability (export), and objection. EU/UK data subjects may also object to processing based on legitimate interests and lodge complaints with a supervisory authority.
Contact privacy@indusflo.s.co.tz. We respond within 30 days unless applicable law requires sooner.
8. International transfers
Where data is transferred outside your country, we use safeguards described in the DPA, including Standard Contractual Clauses where required for EU/UK transfers.
9. Security
Encryption in transit (HTTPS), access controls, audit logging, and regular backups.
10. Subprocessors
We may use hosting, email, and payment providers. A list is available on request or in the DPA annex.
11. Children
The service is for businesses; not directed at children under 18.
12. Changes
We will post version updates and notify material changes to tenant owners.
13. Contact
privacy@indusflo.s.co.tz