Preliminary edition · panel-legal-1.0.0
Invitation privacy notice
This notice describes personal data used for invitations and member accounts in the DZENITY.COM panel. It does not describe every processing activity inside websites or applications hosted by customers.
Data and its source
The workspace owner supplies your email address, selected projects and permissions. When you accept, you supply your name and password. The platform stores a password hash, account and membership identifiers, permissions, invitation expiry and acceptance records, and security audit events. Raw invitation tokens are not stored in the membership database.
Purpose
These records let us verify an invitation, authenticate you, enforce project permissions, revoke access, investigate misuse and record authorized operations. A session cookie is necessary to keep you signed in; theme and language preferences may be stored in your browser. Accepting this notice is not consent to advertising or unrelated uses of your data.
Who can access data
The workspace owner can see the membership information needed to administer access. Platform administrators can access records needed to operate and protect the service. Other customers are not entitled to your account information. If your role permits financial actions, the corresponding payment-confirmation data is available to authorized reviewers.
Storage and deletion
Invitation links expire after seven days. Expiry is not a promise to erase the account or audit history after seven days. Records may be retained while needed for account administration, security, payment verification and applicable obligations. A fixed retention schedule and the full infrastructure-provider and transfer details have not yet been published; this notice does not claim that all data is stored only in the EU.
Your choices and requests
You may decline an invitation. Ask the inviting workspace owner to correct your email or permissions or revoke access. Depending on applicable law, you may have rights to access, correct, erase or restrict personal data, object to its use, receive portable data and complain to a competent supervisory authority. Some requests may be limited by security, accounting or other applicable obligations. Registered operator details and a dedicated privacy-request contact still need to be published.