Privacy & Data Policy

1. Introduction & Overview

Welcome to AZRA OS ("we," "our," or "us"). We provide a high-performance CRM and Marketing Operations Management platform (the "Service") designed to help organizations streamline operations, manage projects, and optimize workflows.

We take your data privacy and security seriously. This Privacy & Data Policy outlines how we collect, process, secure, and retain your data when you use the Service. By accessing or using our Service, you agree to the practices outlined in this policy.

2. Information We Collect

We only collect data necessary to provide a reliable, premium service experience. This includes:

• Account & Profile Information: Name, email address, password hashes, profile photo, job title, and organization affiliation.
• Workspace & Operational Data: Projects, tasks, time logs, estimated hours, client records, custom branding assets, and file attachments uploaded directly to the platform.
• Third-Party Integrations Data: If you connect external integrations (such as Google Calendar, Outlook, Xero, or Slack), we securely retrieve and store sync data (like calendar events, messages, and transaction status) strictly to execute the selected features. We do not use integration data for any other purposes.
• Technical & Usage Data: IP addresses, browser types, session activity logs, error reports, and device settings necessary for platform stability, security audit, and debugging.

3. How We Use Your Data

We process your data strictly to execute our services, specifically to:

• Provision, operate, and maintain your CRM workspace.
• Sync and manage meetings, client communications, and workflows through integrations.
• Provide real-time collaboration tools, notification bells, and task assignee status.
• Process and calculate metrics such as estimates, task logs, and client accounting.
• Protect against fraud, unauthorized access, and other security vulnerabilities.

4. Data Sharing & Third-Party Disclosure

We do not sell, rent, or trade your data to third parties. Data is only shared with verified subprocessors and service providers essential to the operation of the Service, under strict confidentiality agreements:

• Infrastructure Host: Scalable cloud providers to store your database and files securely.
• Email & SMS Services: Providers used to dispatch system notifications and verification links.
• Integration Partners: Services authorized by you (Google, Microsoft, Xero, Slack) during configuration.

5. Premium Security & Encryption

Your workspace safety is our top priority. We implement enterprise-grade security protocols:

• In-Transit Encryption: All data transferred between your browser and the server is encrypted using TLS 1.3 / SSL.
• Rest Encryption: Backup databases and sensitive assets are encrypted at rest.
• Authentication Integrity: Passwords are secured using robust industry-standard hashing algorithms (BCrypt).
• Isolation: Client and organization data are logically separated to prevent cross-workspace data leakage.

7. Compliance, Export & Deletion

We respect your rights to control your data. Depending on your location, you have the right to access, export, update, or permanently delete your account data. If you choose to terminate your workspace, all uploaded logos, favicons, project files, and user records will be securely purged from our active systems.

8. Changes to this Policy

We may update this Privacy & Data Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.