Your information.
A clear explanation.

Browsing the website

The public site does not include advertising pixels, analytics scripts or third-party font requests. Hosting providers may process technical request information, including IP addresses and security logs, to serve and protect the site.

The public pages do not ask for an account. External research links open websites with their own privacy practices.

The executive workspace

The restricted portal processes account information, assigned permissions, document records and security events to operate authorised access. Authenticator MFA is mandatory. Supabase supplies authentication, database and private document storage; Cloudflare hosts the site and its server functions.

The application keeps authentication state in memory rather than browser local storage. Refreshing or closing the page may require another sign-in. Access to company records depends on your account permissions.

Integrated password vault

An integrated encrypted vault is prepared for release. It has not yet been activated in production. Its design encrypts credential fields in the browser using a separate master passphrase before storing the encrypted payload. The passphrase is not sent to the database, and there is no administrator recovery mechanism.

Encryption does not protect an unlocked vault from a compromised device or maliciously altered website code. Release details and availability will be updated when the feature is deployed.

Making an enquiry

The proposed general-enquiries address is [email protected]. Forwarding is being configured and delivery has not yet been verified. Please wait until the contact section confirms that the mailbox is operational.

Keep initial enquiries high level. Do not send passwords, API keys, private keys or confidential documents by ordinary email.

Providers and information access

Cloudflare and Supabase process information needed to supply hosting, security and portal services. Authorised provider administrators remain within the system’s trust boundary. The portal does not guarantee that every access or failed request is captured in its application audit trail.

Document retention, independent backup, recovery and offboarding procedures require separate operational controls. No fixed retention period is asserted by this notice.

About this notice

This page describes the current technical implementation and identifies features that are still pending release. Business contact details, retention schedules and procedures for privacy requests must be finalised before this becomes a complete organisational privacy notice.