Collected: the name, email address and agency details a customer gives us, and the records a customer enters into their own workspace. Purpose: to provide and support the service, to bill for it, and to reply to enquiries - nothing else. Retention: for as long as the workspace exists, and after that for the period the customer sets, with billing records kept as long as tax law requires. Protection: encrypted transport, one database per customer rather than a shared table, sign-in without passwords, and a named list of sub-processors. The full notice, including how to ask for a copy or a deletion, is on the privacy page.