Legal

Privacy policy

This notice explains how the CPI service handles account, organization, procurement, communication, usage, and contact-request data.

Legal

Privacy controls begin with purpose and access.

Tenant isolation, private files, scoped providers, retention, and auditable access create the technical foundation for a responsible privacy program.

01 / CAPABILITY

Data we handle

Account and organization details, authorized procurement records, uploaded documents, audit activity, service usage, and information submitted through contact forms may be processed to provide CPI.

02 / CAPABILITY

Purpose and legal basis

Data is processed to provide and secure the service, maintain authorized workflows, respond to requests, meet contractual obligations, and pursue legitimate security and operational interests where permitted.

03 / CAPABILITY

Service providers

Configured infrastructure, AI, email, maps, analytics, and delivery providers may process the limited data needed for their configured function under applicable agreements.

04 / CAPABILITY

Connected mailbox data

A connected email provider may technically grant broader mailbox access than CPI’s product policy. CPI inspects headers first and is designed to persist only matched CPI threads; each operator must approve provider scopes, retention, and applicable data-processing terms.

05 / CAPABILITY

Retention and security

Tenant scoping, permission checks, protected files, audit trails, and controlled provider configuration support security. Retention periods must follow the operator’s contract, legal duties, and configured policies.

06 / CAPABILITY

Your choices and rights

Subject to applicable law, people may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent through the configured privacy contact. Identity may need to be verified before action.

How it works

Exercise a privacy choice or right

This notice explains how the CPI service handles account, organization, procurement, communication, usage, and contact-request data.

01

Submit the request through the configured contact

02

Verify identity and applicable scope

03

Receive the operator response and action record

Questions about these terms or privacy practices?

Contact the service operator