This is a starting draft, not final legal text. Have it reviewed by a lawyer familiar with your jurisdiction and any data-protection laws that apply to your customers, such as GDPR, before accepting real customers.

1. What We Collect

Account information (name, email), the network data you choose to enter (site names, IP addresses, notes), billing information collected when you add a payment method (processed directly by our payment provider, Paddle. We never see or store your full card number), and basic usage/log data needed to operate and secure the Service.

2. How We Use It

To provide the Service, respond to support requests, send service-related notifications (including alerts you configure), and improve the product. We do not sell your data.

3. Data Isolation

Every organization's data is logically isolated from every other organization's, enforced at the database level. Staff access to customer data is limited to what's needed for support and is never used for any other purpose.

4. Data Storage

Data is stored with our infrastructure providers and protected with industry-standard security practices. Device credentials you store (e.g. router passwords) are restricted to administrator accounts within your own organization.

5. Third-Party Services

We use the following third-party providers to operate the Service, each receiving only the data necessary to perform its function:

6. Your Choices

You can export your sites and reports as CSV from within the app at any time. For a full export of your organization's data, or to delete your organization and all its data, email us and we will process the request within a reasonable time.

7. Data Retention

We retain your data for as long as your account is active, and for a reasonable period after cancellation in case you wish to reactivate, after which it's deleted.

8. Changes to This Policy

We may update this policy from time to time and will note the date of the latest revision above.

9. Contact

Questions about this policy or your data? Reach us at support@toponexa.com.