Privacy Policy

Who this covers

This policy covers visitors to doniastack.com and people who use the Doniastack platform. Where we process data that our customers upload to the platform (for example their employees’ names or their evidence), we do so on the customer’s instructions as their service provider, under our agreement with them.

What we collect

Contact details you send us, such as your name, work email and company, when you email us or request a demo.
Account details, such as name, work email, role and authentication settings, when you use the platform.
Customer content that customers and their users put into the platform, such as policies, evidence, risks, vendors and personnel records.
Technical data, such as IP address, browser type and activity logs, used for security and to run the service.

How we use it

To provide, secure and support the platform and our services.
To reply to enquiries and arrange demos.
To send service emails such as invitations, password resets and notifications you set up.
To meet legal obligations and protect against misuse.

We do not sell personal information, and we do not use customer content to advertise.

We share data only with service providers that help us run Doniastack, listed on our subprocessors list, with professional advisers, or where the law requires it. Our service providers may only use the data to provide their service to us.

Cookies

This website does not set advertising or analytics cookies. It loads typefaces from Google Fonts, which receives your IP address to deliver the font files. The Doniastack platform stores a sign-in token in your browser so you stay signed in; it is removed when you sign out.

How long we keep it

We keep account and customer data for as long as the customer’s agreement runs, then delete or return it as that agreement sets out. We keep enquiry emails for as long as needed to respond and follow up, and records we must keep by law for the required period.

How we protect it

Multi-factor authentication, separated customer workspaces, role-based access, an audit trail and encrypted connections. See Security for more.

Your choices and rights

You can ask to access, correct or delete your personal information, or object to how we use it, by emailing hello@doniastack.com. Depending on where you live, you may have further rights under local law. If your data is in a customer’s workspace, we will pass your request to that customer.

Changes to this policy

We will post any changes on this page and update the date at the top.

Contact

DONIASTACK LLC
hello@doniastack.com
Formal and legal notices: email us with the subject "Legal notice".