Privacy Policy

1. Introduction & Scope

Creu Saathi ("we", "our", or "platform") provides frontline workforce execution software. This policy outlines how operational data, worker voice recordings, checklist evidence, and identity information are handled across our multi-tenant infrastructure.

2. Data We Process

• User Identity: Name, work email address, and authentication credentials (including Google OAuth tokens).
• Voice Transcripts: Ephemeral speech audio processed solely for task intent generation; raw audio is not sold or used for public AI training.
• Operational Evidence: Timestamped photographs, meter readings, GPS site verification telemetry, and checklist responses.
• Audit Logs: Immutable records of task lifecycle events and administrative changes.

3. Multi-Tenant Isolation & Customer Ownership

All customer operational data remains strictly segregated. Our backend uses tenant authorization checks on every request to prevent cross-tenant disclosure. Each customer owns their operational records, audit logs, and uploaded evidence.

4. Security & Data Retention

Data is stored in Neon PostgreSQL with encryption in transit (TLS 1.3) and at rest (AES-256). Evidence and audit trails are retained according to the organization's subscription policy.