Privacy notice
This notice explains the data handled by the invite-only Arvox3 dTrack beta.
Who controls the data
Product owner: Kimmo K. The final company name, business ID, postal address, privacy contact, and effective date are release placeholders and must be added before customer onboarding.
Data we process
The service processes Google account identity details, organization membership and role, invitations, daily operating figures, reconciliation data, and audit events. Hosting and authentication providers may also process technical logs, device information, and security events.
Why we process it
Data is used to authenticate invited users, provide organization reporting, support monthly reconciliation, protect workspace access, investigate errors, and operate the controlled customer beta.
Service providers and access
Vercel hosts the application, Supabase provides authentication and database services, and Google provides sign-in. Workspace raw data is intended to stay within that workspace. Employee Top 5 visibility is limited to names and aggregate sales totals.
Retention and deletion
Active customer data is retained while the beta organization uses the service. The current release plan schedules organization data for purge 30 days after closure. Backup copies may remain for the provider backup retention period.
Questions and requests
A working privacy contact address and instructions for access, correction, deletion, and other applicable data rights will be published here before the first real customer is invited.
