Privacy Policy

1. Scope and roles

This Policy applies to the Intendoris website, accounts, workspaces and support channels. Intendoris controls account, billing relationship, website and service-operation data. For workspace content submitted by a business customer, that customer generally determines why the data is used and Intendoris processes it to provide the service. The applicable Data Processing Addendum provides additional terms.

2. Data we collect

• Account data: name, email address, authentication identifiers and language preference.
• Organisation data: workspace name, membership, roles, invitations and administrative settings.
• Workspace content: intents, requirements, provider information, conversations, documents, decisions and outcomes.
• Billing data: plan, subscription status, Paddle customer and transaction references, and invoice status. Intendoris does not receive or store full payment-card details.
• Support data: contact details, messages, transaction references and information you include in a request.
• Technical data: device and browser information, IP address, timestamps, logs, security events, audit records and service usage.

3. How we receive data

We receive data directly from you and your organisation, automatically when you use the service, and from service providers such as authentication and billing platforms. If another workspace member submits information about you, that organisation is responsible for having an appropriate basis to do so.

4. How we use data

• provide accounts, workspaces, AI-assisted features, collaboration and support;
• authenticate users, enforce permissions, usage limits and subscriptions;
• process purchases and maintain billing and transaction records with Paddle;
• protect the service, prevent misuse and investigate security incidents;
• monitor reliability, diagnose errors and improve product performance;
• communicate service, account, security and policy updates; and
• comply with legal obligations and establish or defend legal claims.

5. Legal bases

Depending on where you live and the context, we rely on performance of a contract, legitimate interests in operating and securing the service, compliance with legal obligations, and consent where required. You may withdraw consent at any time, without affecting processing that occurred before withdrawal.

6. AI processing

Content you submit may be sent to configured AI service providers to generate an analysis or suggestion requested through the product. Intendoris applies structured validation and keeps material actions subject to human review. We do not sell workspace content or use it for advertising. Specific provider and retention details may depend on the production configuration and customer agreement.

7. When we share data

We share personal data only as needed with:

• authorised members of the workspace to which the data belongs;
• hosting, database, file-storage, authentication, AI, email, monitoring and support providers;
• Paddle for checkout, subscriptions, tax, invoicing, fraud prevention and buyer support;
• professional advisers, authorities or other parties where required by law or needed to protect rights and security; and
• a successor in a merger, financing, acquisition or sale, subject to appropriate safeguards.

We do not sell personal data.

8. International transfers

Providers and customers may operate in different countries. Where required, international transfers are supported by adequacy decisions, standard contractual clauses or other lawful safeguards. Business customers can contact us for information relevant to their workspace.

9. Retention

We retain account and workspace data while the account is active and for a reasonable period afterwards to support restoration, disputes, security and legal obligations. Billing and transaction records may be retained longer where required for accounting, fraud prevention or compliance. Support and security records are kept only as long as needed for their purpose. Deleted data may remain in encrypted backups until those backups rotate out of the recovery cycle.

10. Security

We use access controls, tenant isolation, encrypted transport, audit records and operational safeguards designed to protect data. No online service can guarantee absolute security. You are responsible for protecting your account and for configuring workspace access appropriately.

11. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, receive a portable copy, withdraw consent, or complain to a data protection authority. Workspace administrators may be able to handle requests concerning content controlled by their organisation. Submit a request through Supportor email office@intendoris.com. We may need to verify your identity before completing a request.

12. Cookies

Intendoris uses essential browser storage for authentication, security, language and active workspace selection. See the Cookie Policy for details.

13. Children

Intendoris is a business service and is not directed to children. We do not knowingly collect personal data from anyone under 16. Contact us if you believe a child has provided personal data to the service.

14. Changes to this Policy

We may update this Policy as the product, providers or legal requirements change. The effective date appears at the top. We will provide reasonable notice of material changes through the service or by email where appropriate.

Contact

Intendoris
office@intendoris.com