Privacy Policy & Terms of Use

What data we collect

• Account information: your name, work email, employer/subsidiary, and role.
• For manual (non-Microsoft) accounts: a hashed password. We never store your password in plain text.
• Ticket content: the subject, description, priority, and any structured form data or documents you submit with a request.
• Usage and audit data: sign-in activity, ticket status changes, comments, and (for admins) actions like account approvals, API usage overrides, and the Change Management Log of Hub deploys and Admin changes.

Why we collect it

We use this information solely to operate the support desk: routing your request to the right department, keeping you updated on its status, verifying new manual accounts, and maintaining an audit trail for HR/Legal/compliance purposes where required. We do not sell your data or use it for advertising.

Who can see your information

Your tickets are visible to you and to the admins of the department they're routed to. HR-related tickets are restricted to HR Admin accounts specifically - a top-level Admin does not automatically see confidential HR content. Uploaded documents are admin-visible for verification/audit purposes, and access is logged.

How long we keep it

Closed or informational tickets are retained for 2 years after their last update, then archived. Operational error logs are kept for 90 days once resolved. Certain audit trails (account approvals, AI routing decisions, HR safety-net checks) are retained longer to support HR/Legal recordkeeping. See the project's PROGRESS.md for the exact, current policy.

Your choices & requests

A formal process for data-subject access or deletion requests (e.g. GDPR/CCPA-style requests) is not yet implemented - if you have a question or concern about your data, please contact your IT Admin directly in the meantime.