Not final legal advice. Controller identity, legal bases, retention periods, transfer mechanisms and verified subprocessors must be completed before publication.

Scope

This draft describes how ProcessPact may handle website visitor information, installation/account identifiers, minimum assurance evidence and deliberately submitted support information.

Purposes

To provide and secure the service, verify configured workflows, preserve approved evidence, operate commercial states, respond to support and meet legal obligations.

Data minimization

ProcessPact should process only the board data required for verification and retain only the minimum evidence needed for Process Contracts, findings, history and protection.

Website data

The static public website does not receive monday board data or ProcessPact assurance evidence. Analytics are not enabled in this package.

Retention and deletion

Final retention periods and deletion behavior must match the verified implementation and approved policy. See the Data Deletion page.

Your rights

Applicable rights may include access, correction, deletion, restriction, objection and portability, subject to identity verification and legal exceptions.

Contact

Privacy requests: support@theprocesspact.com. Security matters: security@theprocesspact.com.

Changes

Material changes should be dated and communicated through appropriate channels.