Privacy Policy

Conpermisso (“we”, “us”, “our”) helps organizations manage employee access across onboarding, role changes, and offboarding. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

Information we collect

• Account information — name, email address, and authentication credentials when you sign up or are invited to a workspace.
• Workspace data — organizations, positions, applications, employees, and lifecycle requests you and your teammates create inside Conpermisso.
• Usage data — basic technical information such as browser, IP address, and request logs used to operate and secure the service.

How we use information

• To operate, maintain, and improve the Conpermisso service.
• To authenticate users and enforce role-based access controls.
• To send transactional emails (invitations, password resets, lifecycle notifications).
• To detect, investigate, and prevent abuse or security incidents.

Sharing

We do not sell personal information. We share data only with the sub-processors required to run Conpermisso (for example, our hosting and email providers), and when required by law.

Data retention

Workspace data is retained while your organization is active. You may export or request deletion of your data at any time by contacting us.

Security

Conpermisso enforces row-level security at the database layer, encrypted transport (TLS) for all traffic, and least-privilege access for internal operators. See our Security page for details.

Your rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete personal information we hold about you. To exercise these rights, email privacy@conpermisso.com.

Changes

We may update this policy from time to time. Material changes will be communicated through the product or by email.

Contact

Questions? Reach us at privacy@conpermisso.com.