PlagasysPrivacy policy

Privacy policy

Plagasys processes account identity, tenant content, service requests, and usage evidence to provide the registered workspace. Data is stored in the locally operated application database and is separated by tenant identifiers.

Information processed

We process registration details, authentication events, session metadata, generated or submitted content, API consumption, commercial records, and support requests. Passwords are stored only as salted PBKDF2 hashes, and browser session tokens are stored only as SHA-256 hashes.

Identity providers

When an administrator enables enterprise or social sign-in, the provider returns identity claims such as subject, name, and email. Client secrets remain in local encrypted configuration or environment variables.

Use and retention

Information is used for authentication, authorization, service delivery, security auditing, token accounting, reporting, and customer support. Tenant administrators control membership and may request export or deletion through their support channel.

Contact

Use the tenant support address shown inside the workspace for privacy, access, correction, export, or deletion requests.