Information handled
Severus may handle account information such as name, work email and authentication events; workspace content such as requests, approvals, comments, attachments and audit events; payment-routing information; and limited service telemetry used for security, reliability and support. The exact fields depend on the features configured by the workspace.
Why it is used
- To provide the workflows and integrations selected by the workspace.
- To authenticate users and enforce workspace roles.
- To deliver transactional notices and provider responses.
- To investigate security, reliability and support issues.
- To meet applicable legal and contractual obligations.
Roles and service providers
For customer workspace content, the customer generally determines the processing purpose and Severus processes the data to provide the service. Severus may act as controller for its own account, security, commercial and support records. Infrastructure, communications, payment and AI providers may process data where needed for configured features. The applicable subprocessor and transfer details are provided for the intended deployment before contracting or on request.
AI-assisted features
Snape may use workspace context to prepare, classify, summarise or route work when those features are enabled. Permissions and human approval gates still apply. Model providers, data locations, retention and training-use restrictions must be stated in the applicable deployment terms; this notice does not replace those commitments with a broader marketing claim.
Sharing
We do not sell personal information. Data may be disclosed to authorised workspace users, configured service providers, professional advisers, transaction parties, or public authorities where a valid legal basis requires it. Access should be limited to the purpose for which it was provided.
Retention and deletion
Retention depends on record type, workspace instructions, the customer agreement, security needs and applicable legal obligations. We do not publish an invented universal deletion window. Contact privacy support for the schedule that applies to a production workspace.
Your choices and rights
Depending on applicable law, individuals may request access, correction, deletion, restriction, portability, objection or review of an automated decision. Workspace content requests may need to be handled first by the organisation that controls the workspace. Email privacy@severus.ng with the workspace name and the right you want to exercise. Do not email identity documents until a private verification channel is provided.
Nigeria
Our Nigeria data-protection notice summarises rights under the Nigeria Data Protection Act 2023 and points to the Nigeria Data Protection Commission.