Privacy Policy

Version 2026-11. Draft prepared for review by counsel before launch; edit this article from Admin → User Guide.

Who we are

SONAN DIGITAL operates the SONAN CRM platform and this website. For data inside a Customer Workspace, the Customer is the controller and we are the processor acting on their instructions; for website visitors and Workspace account holders we are the controller.

What we process

• Account data — name, email, role, sign-in events, MFA status.
• Workspace data — clients, contacts, documents, invoices, projects, time logs and other records Customers enter.
• Billing data — plan, invoices and payment status; card details are held by our payment processor, never by us.
• Technical data — IP address, browser, pages and API calls, error reports; used for security, rate limiting and reliability.
• Website forms — contact and signup submissions.

Why (legal bases)

To provide the Service under our contract with you; our legitimate interests in securing and improving the Service and preventing abuse; compliance with legal obligations (tax, accounting); and consent where we ask for it (marketing emails).

Sharing

Sub-processors that host or deliver the Service: cloud hosting and database, email delivery, payment processing, error monitoring. Each is bound by a data processing agreement. We do not sell personal data.

Retention

Account and Workspace data for the life of the Workspace plus the deletion grace period; audit logs and invoices as required by law; website form submissions for up to 24 months.

Security

Encryption in transit and at rest, tenant isolation enforced in the database, role-based permissions, audit logging of every change, time-boxed and logged support access, regular backups.

Your rights

Access, correction, export, deletion and objection, subject to law. Workspace Users should contact their Workspace administrator first; account holders and website visitors can use the Contact page. We respond within 30 days.

Cookies

Strictly necessary cookies for sign-in and the active workspace; analytics only where configured by the site owner.

Changes

We will post updates here and, for material changes, notify Workspace administrators in the application.