Data processing

Roles

Purposes of processing

• Synchronising records from the systems you connect.
• Resolving identity so the same person or company appears once.
• Scoring fit and intent, and detecting buying signals.
• Drafting, sending and logging sales communications you have configured.
• Reporting, attribution and audit.

Security measures

• Encryption in transit and at rest.
• Logical separation of each workspace's data.
• Role-based access, least privilege, and access logging for our own staff.
• Credentials and API keys held encrypted server-side, never exposed to browser code.
• Change control and code review before production release.
• Full tracing of AI agent runs, including tools used and data retrieved.

International transfers

We operate globally and use cloud infrastructure and service providers that may be located outside your country. Where we transfer data internationally we do so under contractual terms requiring equivalent protection. Enterprise agreements can specify residency.

Subprocessors

We use the service providers listed on the subprocessors page. We give notice of material changes so you can object before a new provider is used for your workspace.

Breach notification

If we become aware of a security incident affecting your data, we will notify you without undue delay with what we know, what we are doing, and what we recommend you do. Report suspected incidents to oracle@inifye.tech.

Deletion and return

On termination you can export your data in standard formats. We delete the working copy 30 days after termination, other than records we must retain for legal reasons.