Privacy Policy

This policy explains what Dracari CRM collects, why, and what we do with it. It covers the marketing site and the application.

What we collect

• Account data — name, work email, company name, role, and the workspace address you choose.
• Workspace content — the customers, projects, plan sets, measurements, estimates, invoices, documents and messages you and your team enter.
• Billing data — subscription status and invoices. Card numbers are handled by our payment processor; we never store them.
• Technical data — IP address, browser type, pages viewed and timestamps, used for security, auditing and troubleshooting.

How we use it

• To provide, secure and support the Service.
• To process subscriptions and send service notices.
• To investigate abuse, fraud and security incidents.
• To improve reliability and fix defects.

We do not sell your data, and we do not use your workspace content to advertise to you or to anyone else.

Isolation between customers

Every workspace is a separate tenant. Access is enforced at the database level with row-level security, so one customer cannot read another customer's records. Inside your workspace, you control what each role, client and subcontractor can see.

Service providers

We rely on a small number of vendors to run the Service — cloud hosting and database, payment processing, and email delivery. They process data only on our instructions and only as needed to provide their part of the Service. Ask at [email protected] for the current list.

Retention

We keep workspace content for as long as your subscription is active. After cancellation, data is retained for a limited wind-down period so you can reactivate or export, then deleted. Backups age out on their own schedule. Records we must keep for legal or accounting reasons are kept for the required period.

Your choices

• Access and correct your account details from your profile.
• Export the data you have entered while your workspace is active.
• Request deletion of your account and workspace by writing to [email protected].
• Opt out of non-essential email; service and billing notices are required.

Depending on where you live, you may have additional rights over your personal data. Contact us and we will honour them where the law applies.

Cookies

We use cookies that are necessary to sign you in, keep your session, and remember interface preferences such as theme. We do not run third-party advertising trackers on the application.

Security

Data is encrypted in transit. Access to production systems is limited to the people who need it. No system is perfect — if we become aware of a breach affecting your data, we will notify you without undue delay.

Children

The Service is for businesses and is not directed to anyone under 16.

Changes

We will post updates to this policy here with a revised date, and give notice in the application for material changes.

Contact

Privacy questions: [email protected]