Privacy Policy
Last updated: October 3, 2026
Scope and roles
This Policy explains how Idara processes data when you use the site and platform. Idara determines purposes for account, billing, and security data. For applicant, customer, and document data entered by an agency, the agency determines the purposes and Idara processes that data to provide the service under its instructions.
Data we collect
We may collect registration and contact details, agency identity and settings, billing country, users and permissions, login, activity, device and network logs, support requests, subscription and invoice identifiers, and files, fields, stages, and messages added by users.
Sources
Data comes from you, users you authorize, direct use of the service, and payment, hosting, email, or security providers as needed to confirm a transaction, protect an account, or provide support.
Purposes and legal bases
We use data to create accounts, operate features, save settings, manage subscriptions and billing, secure the service and prevent abuse, provide support and notices, improve performance, comply with law, and resolve disputes. Depending on context, processing relies on contract performance, legitimate interests, consent, or legal obligation.
Payment data
Card details are entered with Creem, which processes payment as Merchant of Record. Idara does not receive full card numbers or security codes. We retain identifiers, status, amount, currency, and dates needed for subscription operations, support, accounting, and fraud prevention.
Artificial intelligence
When you choose an AI feature, prompts, context, and data needed for the requested operation may pass through infrastructure and AI providers such as Cloudflare and OpenAI, subject to feature configuration and user permissions. Attachments and passwords are not sent unless the product clearly says this is necessary; users should not submit unnecessary data.
Processors and international disclosure
We share the minimum necessary data with hosting, storage, backup, email, payment, security, analytics, AI, and support providers. We may also disclose data for a valid legal request, to protect rights and security, or in a business reorganization. We do not sell personal data. Some providers may process data abroad using available contractual and organizational safeguards.
Retention and deletion
We retain account data and content while needed to provide the service, then for a reasonable period for backups, security, disputes, accounting, and legal duties. Periods vary by data type and account status. Data may be deleted or de-identified when no legitimate need remains.
Security
We use appropriate technical and organizational controls, including access controls, logging, protection in transit, and backup procedures. No method is perfectly secure, so agencies must use strong passwords, manage permissions, and avoid uploading unnecessary data.
Agency responsibilities and data-subject requests
Agencies must tell applicants and customers how their data is used, establish a lawful basis, and address access, correction, deletion, and objection requests. If a request concerns data controlled by an agency, we may direct it to that agency or assist it as required by law.
Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, portability, or objection, or withdraw prior consent. We may verify identity and retain information required by law or to protect others. You may also complain to the competent data-protection authority.
Cookies and logs
We use necessary cookies and local storage for login, security, language, preferences, and session continuity, and may use limited operational measurement. Disabling necessary technologies may prevent parts of the platform from working.
Minors and sensitive data
The service is intended for agencies and businesses, not directly for children. If an agency processes a minor’s or sensitive data, it must have authority and a lawful basis, apply appropriate safeguards, and avoid collecting more than necessary.
Updates and contact
We may update this Policy as the service or law changes and will publish the new version and date with appropriate notice for material changes. For privacy requests, email support below and clearly identify the account, agency, and request. Never send a password or unnecessary sensitive documents.