Controller and contact
The controller is [company legal name], [registered address]. Privacy contact: [privacy contact email]. These details require counsel confirmation.
Data collected
[List the categories of account, contact, workspace, and support data actually collected after a data-mapping review.]
Runtime and interaction telemetry
[Describe runtime requests, state identifiers, diagnostics, and interaction telemetry only after the implemented collection is verified.]
Cookies and local storage
No analytics or non-essential storage should run before approved consent behavior is implemented. [List strictly necessary storage and approved consent controls here.]
Purposes and legal bases
[Describe each processing purpose and its legal basis, as confirmed by counsel.]
Processors
[List subprocessors, their functions, locations, and applicable data-processing agreements.]
Retention
[Retention periods and deletion criteria to be confirmed by counsel.]
Security
[Describe verified security measures without overclaiming.]
Your rights
[Describe access, correction, deletion, objection, portability, and complaint rights as applicable to the confirmed jurisdiction.]
International transfers
[Describe cross-border transfers and safeguards if applicable.]
Contact
For privacy questions or requests, contact [privacy contact email].