Information processed
The service processes basic request metadata needed for security and operations, such as time, route, coarse network address information, and user-agent data. Security controls store keyed hashes rather than raw email or IP values where practical.
Account information
Self-service organization accounts process an encrypted email address, encrypted display profile, password hash, memberships, roles, and revocable session records. Passwords and raw session tokens are not stored. These workspaces are offered for evaluation under the preview terms; do not enter regulated, confidential, customer, or production financial data.
Public demo
A host-only browser claim reserves one synthetic sandbox without storing the claim token itself in the database. The sandbox remains isolated and available to that browser until its nightly reset. It is not a confidential or durable customer workspace: do not enter personal, financial, confidential, or customer information.
Service providers
Hosting and transactional email providers may process information needed to operate the preview. Provider configuration and data-processing terms must be reviewed before any production customer onboarding.
Retention and requests
Security events and session records are retained for operational and audit needs. A production retention schedule and contact process must be published before accepting customer data.