Privacy Policy

Last updated: October 4, 2026

1. Who We Are

Azora Solutions is a product of Azora Optical Solutions Inc. We provide software that connects project management, people, operations, quality records and approvals for startups and growing teams.

For any data-related inquiries, contact us at: info@azorasolutions.com

2. Data We Collect

We collect only the data necessary to operate the platform:

• Account data: Username, hashed password (bcrypt), role, department
• Usage data: Tasks, projects, documents, and other content you create within the platform
• Access and support request data: Name, email, company, and message you send when requesting a tenant, evaluation, or support
• Session data: Authentication cookies and session security information
• Server logs: IP address, user agent, and request timestamps for security monitoring
• Marketing analytics: Aggregate traffic metrics from Plausible Analytics, configured without marketing cookies

We do not use third-party advertising trackers, marketing cookies, or fingerprinting.

3. How We Store Data

Hosted workspace records are stored in a PostgreSQL database; uploaded files, logs and backups are stored separately. Passwords are hashed, and TOTP two-factor authentication secrets are encrypted at rest. Hosted connections use HTTPS.

Any self-hosted arrangement is defined in its separate services agreement. Information self-hosting customers choose to share with us, such as sales inquiries or support correspondence, is processed separately as described in this policy. Email and other service providers may process the information needed to provide their services.

4. How We Use Data

Your data is used exclusively to:

• Authenticate you and maintain your session
• Display and manage your projects, tasks, and documents
• Respond to demo requests and support inquiries
• Maintain security and audit logs

We do not sell your data or disclose it to third parties for advertising. Service providers may process data only to operate the Service, subject to their applicable contractual and legal obligations, or where disclosure is required by law.

Website walkthrough requests

When you request a walkthrough, Azora Optical Solutions Inc. collects your name, email address, selected workflow and any optional company, team-size or message details you provide. We use them to respond to your request and arrange the conversation. This does not subscribe you to promotional emails.

The website sends the request through our transactional email provider to our sales mailbox. Authorized team members and service providers process it for this purpose. Provider processing may occur outside Canada. We do not include the contents of the form in marketing analytics. The form does not save your answers in local or session storage; your browser may offer its own autofill features. Technical request information is used to limit abuse and maintain service security.

Correspondence is retained as needed to handle the inquiry, follow up on the requested conversation and meet applicable legal obligations. To ask about access, correction or deletion of an inquiry, contact info@azorasolutions.com. Please avoid including confidential, employee or customer records in this form.

5. Data Retention

Account and project data is retained for the duration of your active account or subscription. Account termination deactivates tenant access and does not automatically delete records. Contact us for a data-access or erasure request; retention and deletion are assessed against applicable obligations and technical scope.

6. Your Rights (GDPR)

If you are located in the European Economic Area, you have the right to:

• Access: Request a copy of all data we hold about you
• Rectification: Correct any inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a machine-readable format
• Objection: Object to processing of your data

To exercise any of these rights, email info@azorasolutions.com. We will respond within 30 days.

7. Cookies

The hosted application uses essential cookies for authentication and related security features. Its primary session cookie (azora-session) is:

• HttpOnly (not accessible to JavaScript)
• Secure (only sent over HTTPS)
• SameSite=Strict (mitigates CSRF attacks)

The marketing site (azorasolutions.com) uses Plausible Analytics without setting analytics cookies and reports aggregate traffic metrics. We do not use advertising or cross-site tracking cookies.

8. Security

We implement industry-standard security measures including HTTPS/TLS, Content Security Policy, HSTS, rate limiting, role-based access control, AES-256-GCM encryption-at-rest for sensitive secrets, JWT revocation watermarks, and per-tenant audit logging. We conduct periodic security audits of our codebase.

9. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be communicated via the platform. The "Last updated" date at the top of this page reflects the most recent revision.

10. Contact

For any questions about this privacy policy or your data, contact us at:
info@azorasolutions.com
Azora Optical Solutions Inc.