We process account data (name, email, password hash), project/brand configuration, action tickets, audit logs, and encrypted third-party API tokens you choose to store.
Data is used to provide multi-tenant marketing workflows, authorization, auditing, and optional integrations you connect. We do not sell personal data.
Passwords are hashed (bcrypt). Integration secrets are encrypted at rest with a server-side key. Access is restricted by organization membership and project scope. Report vulnerabilities privately per SECURITY.md.
Account and project data is retained while your workspace is active. You may request deletion by contacting the operator. Audit logs may be retained for security investigations.
Operator domain: marketingos.eware.io