Privacy Policy

Outline for counsel

1. 1
   Who we are - legal entity that publishes this website and provides the product; contact for privacy requests.
2. 2
   Scope - this website, the trial, and the product. Explain that in the product the customer agency decides what employee and client data is processed, and Agency Root processes it on the agency's behalf.
3. 3
   Data we collect on this website - contact and trial form fields, analytics and cookies.
4. 4
   Data processed in the product - employee records, attendance and location when the agency requires it, leave, documents, client records, financial inputs, meeting recordings and transcripts.
5. 5
   How we use data - to provide the service, support, security and billing.
6. 6
   AI processing - providers used under terms that prohibit training on customer data; minimum context; the agency can turn AI off.
7. 7
   Meeting recordings - participant consent confirmed before recording; default 90-day retention of raw audio.
8. 8
   Who can access data - tenant isolation; support access only with customer approval, limited in time and logged.
9. 9
   Sub-processors - hosting, AI, speech, email and notification providers (list required from App Root).
10. 10
    Retention and deletion - 30 days after cancellation, then deletion from primary systems; backup retention of 30 days.
11. 11
    Your rights and how to exercise them - export, correction, deletion.
12. 12
    International transfers - where data is hosted (required from App Root).
13. 13
    Cookies and analytics - consent behavior for Egypt, and later Saudi Arabia and the UAE.
14. 14
    Changes to this policy and effective date.