Privacy Policy

Last updated: July 10, 2026

1. Who We Are

Azora Solutions is a product of Azora Optical Solutions Inc. We provide project management, ERP, QMS, and compliance software for engineering teams.

For any data-related inquiries, contact us at: info@azorasolutions.com

2. Data We Collect

We collect only the data necessary to operate the platform:

• Account data: Username, hashed password (bcrypt), role, department
• Usage data: Tasks, projects, documents, and other content you create within the platform
• Access and support request data: Name, email, company, and message you send when requesting a tenant, evaluation, or support
• Session data: Encrypted session cookies for authentication (HttpOnly, Secure, SameSite=Lax)
• Server logs: IP address, user agent, and request timestamps for security monitoring
• Marketing analytics: Aggregate traffic metrics from Plausible Analytics, configured without marketing cookies

We do not use third-party advertising trackers, marketing cookies, or fingerprinting.

3. How We Store Data

All data is stored in a PostgreSQL database on infrastructure we control. Passwords are hashed using bcrypt (cost factor 12) and are never stored in plain text. TOTP 2FA secrets are encrypted at rest using AES-256-GCM with HKDF-derived keys. Data is transmitted over HTTPS (TLS 1.2+) with HSTS enabled.

Hosted deployments run on managed cloud infrastructure (managed PostgreSQL and object-storage providers) under data-processing agreements; self-hosted customers keep all data on their own infrastructure and we never receive it.

4. How We Use Data

Your data is used exclusively to:

• Authenticate you and maintain your session
• Display and manage your projects, tasks, and documents
• Respond to demo requests and support inquiries
• Maintain security and audit logs

We do not sell your data or disclose it to third parties for advertising. Service providers may process data only to operate the Service, subject to their applicable contractual and legal obligations, or where disclosure is required by law.

5. Data Retention

Account and project data is retained for the duration of your active account or subscription. When deletion is approved, tenant rows are removed from production through the database's cascading-delete path. Residual backup copies and security logs age out under the retention schedule documented for the applicable hosted or self-host deployment; current retention details are available during a security review.

6. Your Rights (GDPR)

If you are located in the European Economic Area, you have the right to:

• Access: Request a copy of all data we hold about you
• Rectification: Correct any inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a machine-readable format
• Objection: Object to processing of your data

To exercise any of these rights, email info@azorasolutions.com. We will respond within 30 days.

7. Cookies

We use a single session cookie (azora-session) for authentication. This cookie is:

• HttpOnly (not accessible to JavaScript)
• Secure (only sent over HTTPS)
• SameSite=Lax (mitigates CSRF attacks)

The marketing site (azorasolutions.com) uses Plausible Analytics without setting analytics cookies and reports aggregate traffic metrics. We do not use advertising or cross-site tracking cookies.

8. Security

We implement industry-standard security measures including HTTPS/TLS, Content Security Policy, HSTS, rate limiting, role-based access control, AES-256-GCM encryption-at-rest for sensitive secrets, JWT revocation watermarks, and per-tenant audit logging. We conduct periodic security audits of our codebase.

9. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be communicated via the platform. The "Last updated" date at the top of this page reflects the most recent revision.

10. Contact

For any questions about this privacy policy or your data, contact us at:
info@azorasolutions.com
Azora Optical Solutions Inc.