Your business data, handled for a defined purpose.

For account administration, website use, security, billing, and direct support, KOMERRA Technologies Limited determines why and how personal data is used. For customer, staff, order, conversation, document, and inventory data a business places in its workspace, that business ordinarily determines the purpose and KOMERRA processes the data to deliver the service. The legal role can vary with the facts and applicable law.

We process workspace data to provide documented product functions, follow an authorized user’s configuration or action, maintain security and reliability, and meet legal duties. We do not sell workspace data, use it to market to a business’s customers, or allow a subprocessor to choose an unrelated purpose.

Processing may concern business owners, staff, prospective and existing customers, delivery contacts, and support correspondents. Data may include identifiers, contact details, business conversations, orders, products, balances, delivery information, documents, permissions, activity history, and technical records. Businesses should avoid entering information that is unnecessary for the workflow.

Access is limited by account role, business membership, purpose, and operational need. Tenant context is derived from the authenticated session, not a browser-supplied business identifier. Privileged platform actions use dedicated administrative routes and audit records. People with operational access are expected to handle information confidentially.

Current measures include encrypted transport, credential hashing, short-lived access sessions and refresh rotation, database row-level tenant controls, application authorization, rate limits, input validation, signed webhook verification, audit and security events, masked monitoring, and confirmation for sensitive AI-assisted actions. Security measures evolve with risk; they are not a promise of absolute security.

KOMERRA uses providers for hosting, storage, email, monitoring, AI, messaging, and payments. The Subprocessors page describes the categories, provider-dependent status, purpose, and possible locations. We require processing to remain limited to the service function and use appropriate transfer safeguards where required.

We provide reasonable assistance with access, correction, deletion, restriction, portability, impact assessment, and regulator requests that relate to data processed for a business. We investigate suspected personal-data incidents and notify the business or affected people when applicable law requires it.

Authorized users can export supported records and documents during the account term. At closure, data is deleted or anonymized according to the Account Deletion and Data Retention policies, except where law, dispute handling, fraud prevention, or security requires a limited record to remain. Backups age out on their normal protected cycle.

This page is general processing information, not a signed data processing agreement for a particular customer. Organizations that require additional contractual terms, security questionnaires, or evidence should contact KOMERRA so the parties can assess the correct scope before relying on it.