Privacy Policy

1. Who we are

This application is owned and operated by cassidy.cloud ("we", "our").

Contact email: admin@cassidy.cloud

Business address: — (no fixed place of business)

2. Data we collect

We collect only the minimum personal data supplied by your identity provider when you sign in. This typically includes:

• Email address
• First name and last name (if provided)
• Tenant/Object IDs generated by authentication providers.
• Runtime telemetry created automatically (e.g. IP address, time stamp, sign‑in result, error codes)

We do not set cookies for tracking, nor do we ingest marketing analytics.

3. Why we process this data

We use the information solely to:

1. Authenticate and authorise access to the Cassidy.cloud application.
2. Maintain security and service health, including troubleshooting, fraud prevention, and audit logging.

We never use your data for profiling, advertising, or any other secondary purpose.

4. Data retention

• Session data (your authentication token) is held only in memory for the duration of the active session.
• Sign‑in, audit, and diagnostic logs stored within our systems are retained for a maximum of 90 days and then automatically deleted.

5. Sub‑processors and data location

Your data is processed exclusively on infrastructure provided by our cloud infrastructure provider (Microsoft Azure). We do not share, sell, or transfer personal data to any other third parties.

6. Security measures

Cassidy.cloud protects data using:

• Modern encryption mechanisms
• Enterprise identity provider security controls (MFA enforcement, risk‑based policies)
• Role‑based access controls and least‑privilege administration
• Automated patching and vulnerability management provided by our cloud infrastructure

7. Your rights & how to exercise them

You may:

• Ask whether we hold personal data about you
• Request a copy of that data
• Request deletion of any data we hold

Email admin@cassidy.cloud with enough information to verify your identity.

8. Changes to this policy

We may update this Privacy Policy periodically. The latest version will always be available at cassidy.cloud/privacy. Material changes will also be communicated to existing users via email.