This Privacy Policy describes how Sancalana ("we," "us," or "our") collects, uses, and protects information when you use our platform and services. We are committed to safeguarding your privacy and handling your data with transparency.

1. Information Collection

We collect information you provide directly when you create an account, fill out a form, or contact us. This includes your name, email address, company name, job title, and billing details. We also collect usage data automatically, including IP addresses, browser type, pages visited, and feature interactions within the platform. When you connect data sources, we process the operational data you choose to import, but this data remains under your ownership at all times.

2. How We Use Information

We use your personal information to provide, maintain, and improve our services, to communicate with you about your account and product updates, and to provide customer support. Usage analytics help us understand how customers interact with the platform so we can improve the experience. We use billing information solely for invoicing and payment processing. We never sell your personal data to third parties, and we do not use customer operational data to train machine learning models.

3. Data Storage & Security

All data is encrypted at rest using AES-256 encryption and in transit using TLS 1.3. Our infrastructure is hosted on AWS within isolated Virtual Private Clouds, with multi-availability-zone redundancy and automated daily backups. We maintain SOC 2 Type II compliance and conduct regular vulnerability assessments. Access to production systems is restricted to authorized personnel through multi-factor authentication and is logged for audit purposes.

We share personal information only when necessary to provide the service: with payment processors for billing, with infrastructure providers for hosting, and with analytics tools for usage insights. All third-party sub-processors are contractually bound to equivalent privacy and security standards. We will disclose information if required by law, regulation, or valid legal process. We will notify you of such requests to the extent legally permitted. A current list of sub-processors is available upon request.

5. Cookies & Tracking

We use essential cookies required for authentication and session management. We also use analytics cookies to understand aggregate usage patterns. You can control non-essential cookies through our cookie consent banner. We do not use third-party advertising trackers. Our analytics are configured to anonymize IP addresses and do not create cross-site profiles. You may disable cookies in your browser settings, though some platform features may not function correctly without essential cookies.

6. Your Rights (GDPR)

If you are located in the European Economic Area, you have the right to access, rectify, erase, restrict processing of, and port your personal data. You also have the right to object to processing and to withdraw consent at any time without affecting the lawfulness of prior processing. To exercise any of these rights, contact our Data Protection Officer at dpo@sancalana.com. We will respond to all requests within 30 days. If you believe your rights have been violated, you have the right to lodge a complaint with your local supervisory authority.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Account data is deleted within 30 days of account closure upon request. Operational data you import into the platform is retained according to your workspace settings and can be exported or deleted at any time through the platform interface. Backup copies are purged within 90 days of deletion. We retain anonymized, aggregate analytics data indefinitely for service improvement purposes.

8. Children's Privacy

Sancalana is a business-to-business platform and is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete such information promptly. If you believe a child has submitted personal data to us, please contact us immediately.

9. International Transfers

Your data may be processed in countries other than your country of residence. We ensure appropriate safeguards are in place for all international transfers, including Standard Contractual Clauses approved by the European Commission and adequacy decisions where applicable. Enterprise customers may choose their data residency region to keep data within the EU, US, or other supported regions. We do not transfer data to countries without adequate protections unless compliant transfer mechanisms are in place.

10. Contact & DPO

For privacy-related inquiries, contact our Data Protection Officer at dpo@sancalana.com. For general questions, reach us at privacy@sancalana.com. Our mailing address is Sancalana Inc., 548 Market St, Suite 36879, San Francisco, CA 94104. We aim to respond to all inquiries within five business days and to formal data subject requests within 30 calendar days.

Privacy Policy