Privacy and personal data

Account and contact flows use name, email, company and, when needed, phone/address. Payment sends order, amount, contact details and IP to PayTR; the application stores no card number or CVV.

Purposes, legal basis, recipients/processors, hosting/transfers, retention/deletion and data-request channels must be verified against the data inventory. This draft grants neither indefinite retention nor blanket consent.

Customer operational data require separate review of responsibilities, authorized users, subprocessors and export/deletion terms. Account email, SMS and public signup are currently disabled; update the inventory before enabling providers.