Privacy Policy

Account information: when you register, we collect your email address, your name (if you provide it), and a password (stored only as a secure hash by our authentication provider — we never see it). If you sign in with Google, we receive your verified email and basic profile from Google to establish your identity; the sign-in method never changes your role or permissions.

Workspace information: the business details and records you enter — such as your workspace name, country, logo, terminology preferences, customers, quotations, work, materials, invoices and payments. This is your business data, held on your behalf.

To keep your account secure and to operate the service, we record authentication events (such as sign-in, sign-up and password-reset attempts) together with the IP address and browser user-agent involved. For a failed sign-in, the email address entered is recorded to help detect abuse. We also keep an audit trail of changes made inside your workspace.

IdaraWorks does not use third-party advertising or analytics trackers, and does not sell your data or share it for marketing.

We use your information only to provide and secure the service: to authenticate you, to store and organize your business records, to enforce permissions and tenant isolation, to send transactional messages you request (such as a workspace invitation or a password reset), and to detect and prevent abuse.

Optional configuration assistance may use AI to help you set up your workspace from the answers you give. This assistance helps you configure your own setup — it never generates or modifies application code, database structure, or security rules, and it does not create business records or data on your behalf.

The service runs on established cloud infrastructure. Your database records and uploaded files (such as your logo) are stored with our hosted database and storage provider; the application is hosted on a cloud platform; transactional emails, when configured, are sent through an email delivery provider. These providers process data on our behalf to run the service.

Data is stored on servers operated by these providers; the specific hosting region is configured for the deployment.

Within your workspace, your records are visible to the members you invite, according to the roles and permissions you set. Financial figures are shown only to members whose role permits it.

We share information with the infrastructure providers described above solely to operate the service, and we may disclose information if required by law. We do not otherwise share your data.

You can view and correct the information in your workspace, export your data, and stop using the service at any time. Records are archived, cancelled or voided rather than hard-deleted, preserving your history; retention and deletion procedures will be published as the service matures.

For privacy questions about a workspace you belong to, contact the owner or administrator who manages it. A published contact channel for privacy requests will be provided before public launch.

We may update this policy as the service evolves and will change the “last updated” date when we do. Material changes will be reflected here.