1. Scope and roles
This policy applies to the AssetCloud website, tenant workspaces, support channels, and related services. For information an organization places in its workspace, that organization generally determines why and how the information is used, and Naxas processes it to provide the service. For account, billing, website, and support information, Naxas acts as the organization responsible for that processing.
2. Information we collect
- Account and organization information: names, work email addresses, phone numbers, organization details, roles, workspace membership, and authentication identifiers.
- Asset and operational information: asset records, serial numbers, locations, assignments, employee or custodian details, maintenance, inventory, license, vendor, approval, ticket, attachment, and audit-history data submitted by authorized users.
- Commercial information: plans, subscriptions, invoices, payment status, transaction references, and payment evidence. Full card or mobile-wallet credentials are handled by the applicable payment provider and are not intended to be stored by AssetCloud.
- Technical information: IP address, browser and device information, timestamps, security events, diagnostic logs, cookie or session identifiers, and product-usage events.
- Communications: inquiries, support messages, feedback, and other information sent to us.
3. How we use information
We use information to provide and secure AssetCloud; authenticate users; isolate tenant workspaces; operate asset, billing, reporting, notification, and support workflows; diagnose incidents; prevent abuse; comply with law; improve reliability and usability; and communicate about the service. We do not sell personal information.
4. Legal grounds
Where applicable law requires a legal ground, we rely on performance of a contract, legitimate interests in operating and protecting the service, compliance with legal obligations, and consent where requested. An organization using AssetCloud is responsible for having an appropriate basis for information it enters about employees, customers, contractors, and other individuals.
5. Sharing and service providers
We may share information with infrastructure, authentication, billing, payment, email, backup, monitoring, analytics, and support providers that help operate AssetCloud; with professional advisers; during a corporate transaction; or when required by law. Providers receive only the access reasonably needed for their role and are expected to protect the information.
6. International processing
AssetCloud and its providers may process information in countries other than the user's country. Where required, we use contractual and organizational safeguards intended to protect information transferred internationally.
7. Retention
We retain account and workspace information while the subscription is active and for a reasonable period afterward to support recovery, resolve disputes, meet accounting or legal requirements, and protect the service. Retention periods vary by record type. Organizations may request export or deletion, subject to contractual, backup, fraud-prevention, and legal-retention requirements.
8. Security
We use administrative, technical, and organizational safeguards including access controls, tenant isolation, encryption in transit, audit logging, backups, and restricted operational access. No system can guarantee absolute security. Report a suspected vulnerability to security@naxasasset.cloud.
9. Cookies and analytics
AssetCloud uses essential cookies or similar technologies for authentication, security, preferences, and session continuity. We may use privacy-conscious product analytics to understand aggregate website and feature usage. We do not use analytics to access the contents of tenant asset records.
10. Your choices and rights
Depending on location, individuals may have rights to access, correct, delete, restrict, object to, or obtain a copy of personal information. Workspace users should first contact their organization, which controls their workspace data. Other requests may be sent to privacy@naxasasset.cloud. We may verify identity and authority before acting.
11. Children
AssetCloud is a business service and is not directed to children. Organizations must not use the service to collect children's information unless they have the authority and safeguards required by applicable law.
12. Changes
We may update this policy as the service and legal requirements evolve. We will publish the revised date here and provide additional notice when a change materially affects users' rights.
13. Contact
Privacy questions and requests can be sent to privacy@naxasasset.cloud. General product support is available at support@naxasasset.cloud.