Privacy Policy

Information we collect

Account data. When you register we store your name and email address. If you choose a password, it is stored using a one-way hash: we do not keep it in plain text and cannot recover it.

Google Sign-In. If you sign in with Google, we receive your email, your name and an account identifier from them. We never receive your Google password and we do not access any other data of yours in their services.

Data you enter. The information about organizations, companies, branches, employees, contacts and any other records you create in the service, together with the files you upload, such as logos or photographs.

Activity logs. We keep a history of the operations performed on each organization’s data — who created, changed or deleted what, and when — so that changes can be audited and issues resolved.

Browser storage. We do not use tracking cookies, analytics or advertising attribution tools. We store your session token and a few preferences — language, theme and the last organization used — in your browser’s local storage. That information stays on your device.

How we use your information

To provide the service: authenticating you, showing the data of the organizations you belong to, and applying the permissions granted to you.

To maintain and improve the service, fix problems and give support when you ask for it.

To contact you by email about matters related to the service or to your account.

Who we share it with

We do not sell your information and we do not share it for advertising purposes. It is only shared with the providers needed to run the service:

• Google, when you choose to sign in with your account there.
• Microsoft Azure, which hosts our servers and database.
• The file storage service that holds the images and documents you upload.

We may also disclose it where legally required by a competent authority.

Where your data is stored

The service runs on Microsoft Azure. Our servers and database are hosted there, and Microsoft is responsible for the physical security of those facilities.

How we protect your information

All traffic between your device and our servers travels over an encrypted connection (HTTPS).

Passwords are never stored in plain text: we keep only a one-way hash, which means that not even we can read them.

Access to data is segmented by organization and by the permissions granted to each person, so you only reach the information of the organizations you belong to.

Our sign-in endpoints limit how many attempts can be made in a period of time, to make guessing credentials impractical.

That said, no security measure on the internet is impenetrable. We work to protect your information, but we cannot guarantee that it will never be compromised.

Your responsibilities

Your password identifies you before our servers, so keep it to yourself: do not share it and do not reuse it on other services. Anyone who has it can act as you inside the application.

If you think someone else has gained access to your account, change your password from My profile and write to us so we can help.

Deleting an organization

When you delete an organization, it and all of its information stop being available immediately: it disappears from your list, nobody can enter it again, and its data becomes unreachable from any of our applications, for you and for the rest of its team.

We want to be clear on one point: this is a logical deletion. The records stay stored in our database, flagged as deleted, rather than being physically removed. The reason is that an organization’s data is interwoven with many other tables, and removing it outright would compromise the integrity of the information. The action cannot be undone from the application.

Closing your account

You can delete your account from My profile in Ánfora Business, or by writing to our contact address. If you own business organizations, you will have to delete them first: they belong to a team and are not removed along with your account.

When you close your account we do the following:

• We anonymize your user record: your email is replaced with a meaningless value, your name is erased and your password is removed.
• We fully delete the link to your Google account, if you had connected one.
• We delete your membership of organizations, along with any roles, branches and companies assigned to you.
• We unlink from you any customer or employee records other organizations had created, which remain their information.
• We flag your personal organization as deleted.

We keep the anonymized user record, stripped of anything that identifies you, because the audit history and the ownership of organizations refer to it; removing it would leave those records inconsistent. After closure we cannot relate that record back to you.

Closing an account is final: there is no way to restore it. If you register again with the same email, a new and empty account is created.

How long we keep information

We keep your personal data for as long as your account is active. When you close it, the information that identifies you is anonymized as described above.

The business data of organizations — including deleted ones — remains stored for as long as it is needed to run the service or to meet legal obligations.

Your rights

You may request access to the personal information we hold about you, ask us to correct it if it is inaccurate, and request its deletion.

You may also object to a particular use of your information, and withdraw a consent you previously gave us. Withdrawing it does not affect what we did with your data while the consent was in force, and it may mean we can no longer provide part of the service.

You are entitled to know who we share your information with; the providers are listed above.

To handle these requests we may ask you to verify your identity, usually by confirming details we already hold or by writing to us from the email associated with the account.

Links to third-party sites

The service may contain links to sites we do not control. This policy only covers the information we collect ourselves; we encourage you to review the privacy policies of any sites you visit.

Changes to this policy

We may update this policy to reflect changes in our practices. The date of the last revision appears at the top and the bottom of this page.

We will not reduce your rights under this policy without your explicit consent. Every change is published on this page, and when a change is significant we will tell you about it directly, for instance by email to the address associated with the account.

Contact

If you have questions about this policy or want to exercise your rights, write to us at hello@anforasuite.com.