Privacy Policy

1. Scope of this policy

This Privacy Policy explains how Servorian collects, uses, stores, and discloses information when you use the public website, create an account, join tenant workspaces, interact with billing or support features, or receive platform communications.

In this policy, "Servorian", "we", "us", and "our" refer to the operator of the service.

2. Information we collect

• Account information such as email address, password hash, profile details, avatar, phone number, and security settings.
• Tenant and workspace information such as membership, role assignments, and tenant-related billing associations.
• Security and verification information such as login sessions, verification codes, verification links, audit logs, and access-control events.
• Billing and subscription information such as Stripe customer or subscription identifiers, invoice records, plan selections, billing settings, and payment-related status metadata.
• Support and operational information such as support requests, replies, notification records, service messages, and message-delivery logs.
• Basic technical information such as IP-related request metadata, browser or device information, and essential cookies or similar storage used to keep the service operating securely.

3. How we use information

• To authenticate users, protect accounts, manage sessions, and prevent abuse or unauthorized access.
• To provide tenant-aware routing, workspace membership checks, and account-management features.
• To process subscriptions, payment-method setup, invoices, renewals, cancellations, taxes, and related billing support.
• To provide support workflows, operational messaging, and account or security communications.
• To maintain auditability, investigate misuse, troubleshoot the service, and improve reliability over time.

4. Service providers and integrations

• Stripe may be used for subscription billing, payment setup, and invoice-related workflows.
• Object storage providers may be used to store uploaded assets such as avatars, notification images, or billing assets.
• Email and messaging providers may be used to send verification, security, billing, support, or operational notices.
• Hosting and infrastructure providers process technical traffic and storage needed to run the application.

5. When we disclose information

We do not sell personal information. We disclose information only when needed to operate the service, comply with law, provide requested features, or protect the service and its users.

• To service providers that support storage, billing, communications, infrastructure, and security operations.
• To administrators or authorized personnel who need access to support users, investigate misuse, manage billing, or maintain the service.
• When required by law, regulation, court order, or lawful government request.
• When necessary to detect, prevent, or respond to fraud, security incidents, abuse, or violations of the Terms of Service.

6. Retention and deletion

• Account, billing, audit, and support records may be retained for security, compliance, tax, invoicing, or operational reasons.
• If an account is anonymized, records may remain where continued retention is reasonably necessary.
• Operational logs and notification history may be retained for reliability, support, and abuse-prevention purposes.

7. Security

• Account passwords are stored as hashes rather than in plain text.
• Session controls, verification flows, and optional two-factor authentication are used to help protect accounts.
• No method of transmission, storage, or security control is perfect, and we cannot guarantee absolute security.

8. Your choices

• You can update account details that the service allows you to manage directly.
• You can manage tenant membership participation as permitted by the tenant owner or administrators.
• You can cancel subscriptions or manage billing details through the billing flows made available in the service.
• You can choose not to provide certain information, but some features cannot work without it.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version in the service and update the last-updated date on this page.