Data we handle
Account and organization details, authorized procurement records, uploaded documents, audit activity, service usage, and information submitted through contact forms may be processed to provide CPI.
This notice explains how the CPI service handles account, organization, procurement, communication, usage, and contact-request data.
Tenant isolation, private files, scoped providers, retention, and auditable access create the technical foundation for a responsible privacy program.
Account and organization details, authorized procurement records, uploaded documents, audit activity, service usage, and information submitted through contact forms may be processed to provide CPI.
Data is processed to provide and secure the service, maintain authorized workflows, respond to requests, meet contractual obligations, and pursue legitimate security and operational interests where permitted.
Configured infrastructure, AI, email, maps, analytics, and delivery providers may process the limited data needed for their configured function under applicable agreements.
A connected email provider may technically grant broader mailbox access than CPI’s product policy. CPI inspects headers first and is designed to persist only matched CPI threads; each operator must approve provider scopes, retention, and applicable data-processing terms.
Tenant scoping, permission checks, protected files, audit trails, and controlled provider configuration support security. Retention periods must follow the operator’s contract, legal duties, and configured policies.
Subject to applicable law, people may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent through the configured privacy contact. Identity may need to be verified before action.
This notice explains how the CPI service handles account, organization, procurement, communication, usage, and contact-request data.