Privacy Policy

Draft for review — this policy is a working summary and must be reviewed by legal counsel before it is relied on.

1. What we process

On behalf of each tenant we process the business data the tenant enters or receives through its channels: staff accounts, customer names and contact details, orders, payments (references only — never raw card data), inventory and audit records.

2. Roles

The tenant is the controller of its customers' data; DAAPrime Technologies acts as the processor and handles it only on the tenant's instructions and to operate the service.

3. Security

Data is encrypted in transit and at rest. Access is controlled by role and branch, sensitive actions are recorded in an immutable audit trail, and secrets are held outside source code. Payment-gateway credentials are stored encrypted.

4. Retention and deletion

Data is kept for as long as the tenant's account is active or as the tenant configures. Backups are retained for a limited period. Tenants can request export or deletion of their data.

5. Sub-processors

We use infrastructure and payment providers to deliver the service (for example our managed database and hosting providers, and each tenant's own payment gateway).

6. Contact

For privacy questions or requests, contact your company's ERP administrator or DAAPrime Technologies.