Skip to content
ServiOara

Back to the site

Personal Data Policy

This text is a draft awaiting legal review. Before publishing, the data controller details, retention periods and transfer conditions must be adapted to your organization.

Collected data is used only for the stated purposes and never for anything else. Access is restricted by role and company; customer users see only their own company's records. Passwords are stored irreversibly; email and provider passwords are encrypted. Every change to a record is written to the audit trail with who made it and when. Data processing is reviewed periodically and retention periods can be updated by an organization administrator.