Data Protection

Privacy Policy

How we collect, use, and protect your personal information

Effective Feb 1, 2026

Table of Contents

  • Introduction
  • Data We Collect
  • How We Use Your Data
  • Data Sharing
  • Data Storage & Security
  • Data Retention
  • Your Rights
  • Cookies & Tracking
  • Facebook & LinkedIn Data Use & Deletion
  • Children's Privacy
  • International Transfers
  • Policy Changes
  • Contact Us

1. Introduction

Ragenaizer ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our enterprise workspace platform, including Vision, Chat, Drive, and HRMS services.

By using our services, you consent to the data practices described in this policy. If you do not agree with these practices, please do not use our services.

2. Data We Collect

2.1 Information You Provide

  • Account Information: Name, email address, password, organization name
  • Profile Data: Job title, department, phone number, profile picture
  • Payment Information: Billing address, payment method details (processed by secure payment providers)
  • Communications: Messages, files, and content shared through our services
  • HRMS Data: Employee records, payroll information, attendance data, leave records (as provided by your organization)

2.2 Information Collected Automatically

  • Device Information: Device type, operating system, browser type, unique device identifiers
  • Usage Data: Features used, time spent, actions taken within the platform
  • Log Data: IP address, access times, pages viewed, referring URLs
  • Location Data: General location based on IP address (for geofencing features in attendance)

2.3 Information from Third Parties

  • Single Sign-On (SSO) providers if configured by your organization
  • Integration partners when you connect third-party services

2.4 Facebook & Social Media Integrations

If you connect Facebook pages through our CRM module, we may receive:

  • Page Information: Facebook Page name, Page ID, and page access tokens
  • Lead Data: Name, email, phone number, and other form fields submitted through Facebook Lead Ads by prospective customers
  • Ad Campaign Data: Ad ID, form ID, and campaign identifiers associated with leads

This data is collected only when an authorized administrator explicitly connects a Facebook Page and is used solely for managing your sales pipeline within our CRM. We do not sell, rent, or share Facebook user data with any third parties beyond what is described in this policy. You may disconnect Facebook pages at any time through CRM Settings, and all associated page tokens will be revoked.

2.5 LinkedIn Integrations

If you connect your LinkedIn account or LinkedIn Company Pages through our CRM module, we may receive:

  • Profile Information: LinkedIn profile name, headline, company, and profile URL
  • Lead Data: Name, email, phone number, job title, company name, and other form fields submitted through LinkedIn Lead Gen Forms by prospective customers
  • Campaign Data: Campaign ID, form ID, and advertising account identifiers associated with leads
  • Company Page Data: Company Page name, ID, and follower statistics (when Company Page access is granted)

This data is collected only when an authorized administrator explicitly connects a LinkedIn account or Company Page and is used solely for managing your sales pipeline within our CRM. We do not sell, rent, or share LinkedIn user data with any third parties beyond what is described in this policy. You may disconnect LinkedIn integrations at any time through CRM Settings, and all associated access tokens will be revoked.

3. How We Use Your Data

We use your information to:

Purpose Legal Basis
Provide and maintain our services Contract performance
Process payments and billing Contract performance
Send service notifications Contract performance
Improve and personalize services Legitimate interest
Provide customer support Contract performance
Ensure security and prevent fraud Legitimate interest
Comply with legal obligations Legal requirement
Send marketing communications Consent (opt-in)

4. Data Sharing

We do not sell your personal information. We may share data with:

4.1 Service Providers

Third-party vendors who assist in operating our services (hosting, payment processing, analytics). These providers are bound by confidentiality agreements.

4.2 Your Organization

If you use our services through an organization, administrators may access your data according to their organizational policies.

4.3 Legal Requirements

We may disclose data when required by law, court order, or government request, or to protect our rights and safety.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you of any such change.

5. Data Storage & Security

We implement industry-standard security measures to protect your data:

  • Encryption: Data encrypted in transit (TLS 1.3) and at rest (AES-256)
  • Access Controls: Role-based access with multi-factor authentication
  • Infrastructure: Secure cloud infrastructure with SOC 2 compliance
  • Monitoring: 24/7 security monitoring and intrusion detection
  • Backups: Regular encrypted backups with disaster recovery

For self-hosted deployments, data security is managed according to your organization's infrastructure and policies.

6. Data Retention

We retain your data as follows:

  • Active Accounts: Data retained while your account is active
  • Deleted Accounts: Data deleted within 30 days of account closure
  • Backups: Removed from backups within 90 days
  • Legal Requirements: Some data may be retained longer if required by law
  • Aggregated Data: Anonymized analytics may be retained indefinitely

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

  • Access: Request a copy of your personal data
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your data ("right to be forgotten")
  • Portability: Receive your data in a portable format
  • Restriction: Request limitation of data processing
  • Objection: Object to certain processing activities
  • Withdraw Consent: Withdraw previously given consent

To exercise these rights, contact us at privacy@ragenaizer.com. We will respond within 30 days.

8. Cookies & Tracking

We use cookies and similar technologies to:

  • Remember your login and preferences
  • Understand how you use our services
  • Improve performance and user experience

Types of Cookies

Type Purpose Duration
Essential Required for basic functionality Session
Functional Remember preferences 1 year
Analytics Usage statistics 2 years

You can manage cookies through your browser settings. Disabling cookies may affect functionality.

9. Facebook & LinkedIn Data Use & Deletion

When you use our Facebook Lead Ads or LinkedIn Lead Gen Forms integrations, the following applies:

9.1 Facebook

  • Purpose Limitation: Facebook data is used exclusively to populate leads in your CRM pipeline. We do not use Facebook data for advertising, profiling, or any purpose beyond CRM lead management.
  • Data Retention: Facebook lead data is retained as long as the lead record exists in your CRM. You may delete individual leads at any time.
  • Disconnection: When you disconnect a Facebook Page from the CRM, we revoke the stored page access token. Existing leads created from that page remain in your CRM until manually deleted.
  • Data Deletion Requests: To request deletion of all Facebook-related data, email privacy@ragenaizer.com with the subject "Facebook Data Deletion Request". We will process your request within 30 days and confirm deletion.

9.2 LinkedIn

  • Purpose Limitation: LinkedIn data is used exclusively to populate leads in your CRM pipeline. We do not use LinkedIn data for advertising, profiling, or any purpose beyond CRM lead management.
  • Data Retention: LinkedIn lead data is retained as long as the lead record exists in your CRM. You may delete individual leads at any time.
  • Disconnection: When you disconnect a LinkedIn account or Company Page from the CRM, we revoke the stored access and refresh tokens. Existing leads created from LinkedIn remain in your CRM until manually deleted.
  • Data Deletion Requests: To request deletion of all LinkedIn-related data, email privacy@ragenaizer.com with the subject "LinkedIn Data Deletion Request". We will process your request within 30 days and confirm deletion.
  • LinkedIn API Compliance: We comply with LinkedIn's API Terms of Use. We do not scrape, cache beyond permitted periods, or use LinkedIn data to build competing services or contact databases outside our CRM.

10. Children's Privacy

Our services are not intended for children under 18 years of age. We do not knowingly collect personal information from children. If we discover that we have collected data from a child, we will delete it promptly.

If you believe a child has provided us with personal information, please contact us immediately.

11. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place:

  • Standard Contractual Clauses (SCCs) for EU data transfers
  • Data Processing Agreements with all service providers
  • Compliance with applicable data protection laws

For self-hosted deployments, data remains within your chosen infrastructure.

12. Policy Changes

We may update this Privacy Policy periodically. Changes will be communicated through:

  • Updated "Last Modified" date on this page
  • Email notification for material changes
  • In-app notification when you next log in

We encourage you to review this policy regularly.

13. Contact Us

For privacy-related inquiries or to exercise your rights:

  • Privacy Team: privacy@ragenaizer.com
  • Data Protection Officer: dpo@ragenaizer.com
  • General Support: support@ragenaizer.com
  • Website: https://ragenaizer.com