Privacy Policy

This Privacy Policy describes how IS Digital (“IS Digital”, “we”, “us”, or “our”) collects, uses, shares, and protects information when you use our website, the IS Digital console, and any application within the IS Digital ecosystem (collectively, the “Services”).

1. Information We Collect

We collect the following types of information:

• Account information — your name, email address, company name, and password (stored as a secure hash) when you create an account or accept an invitation to join a workspace.
• Usage information — information about how you interact with the Services, including log data, device/browser information, IP address, and timestamps, used for security and audit purposes.
• Communications — information you provide when you contact us, request a demo, or submit a support request.
• Phone number for two-factor authentication — if you choose to enable two-factor authentication, we store your phone number and use it to send a one-time verification code via WhatsApp when you sign in.
• Cookies and similar technologies— used to keep you signed in, remember preferences, and understand how the Services are used. See “Cookies” below.

2. How You Sign In

IS Digital authenticates accounts using email and password. Your password is stored only as a secure hash and is never readable by us. You may optionally enable two-factor authentication, in which case we send a one-time verification code to your phone via WhatsApp when you sign in. We do not currently offer third-party single sign-on; if we add it in the future, we will update this policy to describe what information we receive from those providers.

3. How We Use Information

We use the information we collect to:

• Create and maintain your account, tenant/workspace, and team memberships;
• Authenticate you and keep your session secure across the IS Digital ecosystem;
• Provide, operate, and improve the Services and customer support;
• Send transactional emails (e.g. verification codes, invitations, welcome messages, billing notices);
• Maintain audit logs for security, compliance, and troubleshooting;
• Communicate with you about updates, security notices, and — where permitted — product news.

4. Single Sign-On Across IS Digital Apps

IS Digital acts as an identity provider for applications within the IS Digital ecosystem. When you sign in once, certain basic profile information (such as your name, email address, tenant, and role) may be shared with the specific application you access, in order to provide a seamless single sign-on experience. Each connected application has its own terms and privacy practices governing how it uses this information.

5. Cookies

We use a session cookie to keep you signed in and to protect against cross-site request forgery. We may also use cookies to remember your preferences and to understand aggregate usage of the Services. You can control cookies through your browser settings; disabling essential cookies may prevent you from signing in.

6. How We Share Information

We do not sell your personal information. We may share information with:

• Service providers who help us operate the Services (e.g. hosting, email delivery via Resend);
• Other members of your tenant/workspace, to the extent necessary for collaboration (e.g. name, email, role);
• Authorities, where required by law or to protect the rights, safety, and security of IS Digital, our users, or the public.

7. Data Retention

We retain account and audit information for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account at any time — see Data Deletion for instructions.

8. Data Security

We use industry-standard measures to protect your information, including encryption in transit (HTTPS/TLS), secure password hashing, and access controls. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Your Rights

Depending on your location, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us using the details below.

10. Children’s Privacy

The Services are not directed to individuals under the age of 16, and we do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a new “Last updated” date. Continued use of the Services after changes become effective constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy or how we handle your information, contact us at hello@is-digital.com.