Privacy Policy

This policy describes how Prosas handles personal data on our website and in the Prosas platform. It applies to visitors to our site, to people who sign up for an account, and to the users an organisation invites into its workspace.

Where an organisation subscribes to Prosas and invites its own employees, that organisation is the controller of the data inside its workspace and we process it on their behalf, under the terms of their agreement with us.

We collect the data you give us and the data we need to keep the service running. We do not buy personal data from third parties.

Each category is used for a stated purpose, and not for another one without telling you first.

We do not sell personal data, and we do not share it for anyone else's advertising.

We use a small number of service providers to run the platform — hosting, email delivery, file storage and error monitoring. Each one is bound by a contract that limits them to processing data on our instructions.

We disclose data to a public authority only where the law requires it, and we tell the affected customer unless we are legally prevented from doing so.

Workspace content is kept for as long as the organisation's subscription is active, and for a limited grace period after it ends so that an account can be recovered or exported.

Server logs are kept for a short retention window and then deleted. Support tickets are kept while they may still be relevant to your account.

Some records — invoices, for example — are kept longer where accounting or tax law requires it.

Data is encrypted in transit. Access to production systems is restricted to the people who need it, and is logged.

Every organisation's data is isolated from every other organisation's. Inside a workspace, what a user can see is decided by the roles and permissions their own administrator sets.

No system is perfectly secure. If a breach affects your data, we will tell you and the relevant authority within the timeframes the law requires.

Depending on where you are, you may have the right to ask us for a copy of your personal data, to correct it, to delete it, to restrict how we use it, or to object to a particular use.

If your data sits inside an organisation's workspace, we will usually pass your request to that organisation, because it is theirs to decide. We will tell you when we do.

Write to the address at the bottom of this page and we will respond within the period the applicable law sets.

We use cookies that are necessary to sign you in and keep you signed in, and to remember preferences such as your language.

We do not use advertising cookies and we do not embed third-party trackers on the marketing site.

When this policy changes materially, we update the date at the top of the page and notify account administrators by email before the change takes effect.

Continuing to use the platform after a change means you accept the updated policy.