This is a starting template. It describes how the platform actually works, but it has not been reviewed by a lawyer for your jurisdiction. Have it checked before you rely on it.
Who this covers
This policy explains what ExecCortex Platform does with personal data, both on this website and in the product.
The distinction that matters: for your account we are the controller, and for the content inside your workspace you are the controller and we only process on your instructions. The GDPR page sets that out in full.
What we collect
- Account details, your name, work email, company and password hash.
- Workspace content, whatever you and your team create: leads, contacts, projects, invoices and their attachments.
- Billing details, handled by our payment processor. We never see or store full card numbers.
- Technical data, IP address, browser and timestamps, kept to keep the service secure and to investigate problems.
- Support conversations, what you write to us, so we can answer.
Why we are allowed to
To perform the contract you entered into when you signed up; to meet legal obligations such as keeping invoices; and for our legitimate interest in keeping the service running, secure and improving.
Where we rely on consent (optional analytics cookies, marketing email) you can withdraw it at any time and nothing else changes.
Who else sees it
A small number of vendors help us run the service, each bound by contract. They are listed on the sub-processors page.
We do not sell personal data, and we do not use your workspace content to train AI models.
How long we keep it
Workspace content is kept while your account is open. After you close it, data is deleted on request, other than records we are legally required to retain (invoices and tax records in particular) which are kept for the statutory period and nothing longer.
Your choices
Ask for a copy, a correction or a deletion at any time through the data request form. Manage optional cookies from the cookie policy or the footer link.
Questions: privacy@example.com.