This Policy explains how information is handled when you use the BudayrOS website and service.
1. Scope
This Policy applies to the public website, account creation, subscription management, operational use, and contact forms. A customer organization may itself be legally responsible for data it enters about employees, customers, or suppliers, while we process that data to provide the service.
2. Information we collect
- Account information such as name, login, email, and language.
- Organization information such as name, country, branches, warehouses, and billing details.
- Operational data entered by users, including products, stock, suppliers, customers, sales, purchases, attendance, and reports.
- Subscription and payment metadata such as amount, currency, transaction status, and payment-provider reference. We do not need to store a full card number when card details are processed by an external payment provider.
- Information you submit through the Contact form.
- Technical and security information needed for sessions, logging, audit, protection, and troubleshooting, including account-recovery request records, a hashed recovery token, request time, and abuse-prevention indicators.
3. How we use information
We use information to create accounts, operate the service, enforce permissions and tenant isolation, process subscriptions and payments, provide support, protect the service, diagnose errors, meet legal obligations, and improve reliability and performance.
4. Legal bases
Depending on the information and applicable law, processing may rely on performance of a contract, legitimate interests in operating and securing the service, compliance with legal obligations, or consent where required.
5. Sharing
We do not sell personal data. We may share the minimum necessary information with hosting, infrastructure, payment, security, and technical service providers, or with public authorities where legally required. Service providers are expected to use information only for the services they provide under appropriate arrangements.
6. International transfers
Hosting or service providers may require data to be processed in another country. Where this occurs, we take reasonable measures and safeguards required by applicable law to protect the information.
7. Cookies and sessions
We use cookies and similar technologies necessary for login, session security, remembering language, and core site functionality. Optional security or payment services may use additional technologies according to their configuration.
8. Retention
We retain information while needed to provide the service, meet contractual obligations, protect rights, and comply with legal, accounting, and security requirements. Retention varies by record type and purpose, and certain audit or transaction records may be kept longer where law or record integrity requires it.
9. Security
We use technical and organizational controls intended to protect information, including permissions, tenant isolation, audit records, and access controls. No Internet-connected service can guarantee absolute security, so customers must also protect devices, passwords, and accounts.
10. Individual rights
Depending on applicable law, you may have rights to access, correct, delete, restrict, object to certain processing, or obtain a copy of personal data. Some rights may be limited where records must be retained by law or to protect legitimate rights.
11. Data held by a customer organization
If your data is present because an organization uses the service to run its business, it may be appropriate to start your request with that organization because it typically determines why the data was entered. We will cooperate with the organization as necessary for valid requests.
12. Children
The service is business software and is not intended for children to create personal accounts. Organizations should avoid entering data they do not need for legitimate business purposes.
13. Changes
We may update this Policy as the service, processing practices, or legal requirements change. The latest update date will appear on this page.
14. Privacy contact
Privacy questions or requests can be sent through the Contact page by choosing “Privacy / Data Request”.