Privacy & Data Policy
1. Introduction
At Admin, we are committed to protecting your personal information and being transparent about how we collect, use, and share your data. This Privacy & Data Policy outlines our practices regarding the information we collect through our platform, website, and related services.
By accessing or using Admin's services, you acknowledge that you have read, understood, and agree to the collection and processing of your personal data as described in this policy. If you do not agree, please refrain from using our services.
2. Information We Collect
We collect information to provide, improve, and secure our services. The types of data we collect include:
2.1 Personal Information
- Name, email address, and contact details
- Account credentials (passwords, authentication tokens)
- Organization/company name and role
- Billing and payment information (processed securely by third-party providers)
2.2 Usage & Technical Data
- IP address, browser type, device identifiers, and operating system
- Log data, session duration, and interaction patterns
- Platform configuration, feature usage, and error reports
2.3 Business & Operational Data
Data uploaded or created within the Admin platform, including team structures, workflow configurations, reports, and integrations with third-party services.
3. How We Use Your Information
We process your data for the following legitimate business purposes:
- Service Delivery: To operate, maintain, and provide the Admin platform and related features
- Account Management: To verify identity, manage subscriptions, and process payments
- Improvement & Development: To analyze usage trends, fix bugs, and develop new features
- Security & Fraud Prevention: To monitor for unauthorized access, system abuse, or compliance violations
- Communication: To send service announcements, security alerts, and support responses
- Legal Compliance: To meet regulatory obligations, enforce terms of service, and respond to lawful requests
4. Data Sharing & Disclosure
We do not sell, rent, or trade your personal information. We may share data only in the following circumstances:
- Service Providers: Trusted third parties who assist in platform operations (hosting, analytics, payment processing, customer support) under strict data processing agreements
- Legal Requirements: When required by law, subpoena, court order, or government authority
- Business Transfers: In the event of a merger, acquisition, or asset sale, with appropriate notice and continuity of privacy protections
- With Your Consent: When you explicitly authorize specific sharing for designated purposes
5. Data Security
We implement industry-standard technical and organizational measures to protect your data:
- End-to-end encryption for data in transit (TLS 1.3) and at rest (AES-256)
- Role-based access controls and multi-factor authentication for administrative functions
- Regular security audits, penetration testing, and vulnerability assessments
- Strict internal access policies limiting employee data exposure to need-to-know basis
While we strive to protect your information, no online service can guarantee absolute security. We encourage you to use strong, unique passwords and enable available security features.
6. Data Retention
We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type:
- Account Data: Retained while your account is active, plus 12 months after closure
- Billing Records: Retained for 7 years for tax and accounting compliance
- Usage Logs: Aggregated and anonymized after 18 months
- Communications: Retained for support resolution and quality assurance, then purged
Upon deletion, data is securely erased from active systems. Backups may retain residual copies until scheduled overwrite cycles complete.
7. Your Rights & Choices
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access: Request a copy of the data we hold about you
- Correction: Update or rectify inaccurate or incomplete information
- Deletion: Request removal of your data where no legal retention requirement applies
- Portability: Export your data in a structured, machine-readable format
- Opt-Out: Unsubscribe from marketing communications at any time
- Restriction: Limit processing while disputes or legal matters are resolved
To exercise these rights, contact our Data Protection Officer using the details in Section 12. We will respond within 30 days, or longer if legally permitted for complex requests.
9. International Data Transfers
Admin operates globally, and your data may be processed in countries other than your own. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs), binding corporate rules, and compliance with applicable data protection frameworks (GDPR, CCPA/CPRA, etc.).
10. Children's Privacy
Admin's services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children without parental consent. If we become aware of such collection, we will take immediate steps to delete the information.
11. Policy Updates
We may revise this policy to reflect changes in technology, regulation, or business practices. Material updates will be communicated via email or platform notification at least 30 days before the effective date. Continued use of our services constitutes acceptance of the updated policy.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy & Data Policy or our data practices, please reach out: