Privacy

This Privacy Policy explains how Wilderness Research and Consultancy ("WRC", "we", "us") collects and uses personal data when you use TORI (the "Service").

1. Data we collect

• Account data: email address, password hash, and organization membership.
• Billing data: company name, billing email, billing address, VAT/tax identifiers (if provided).
• Usage data: basic technical logs (e.g., timestamps, pages accessed) to operate and secure the Service.
• Payment data: payments are processed by Stripe. We do not store full card details.

2. How we use data

• To provide and operate the Service (authentication, access control, feature delivery).
• To process billing, issue invoices/receipts, and provide customer support.
• To maintain security, prevent fraud, and debug issues.
• To comply with legal obligations.

3. Legal bases

We process personal data based on contract performance (providing the Service), legitimate interests (security and service improvement), and legal obligations (billing/accounting).

4. Sharing

We share data with:

• Stripe for payment processing and invoicing/receipts.
• Service providers that help us host and operate the Service (where applicable).
• Authorities when required by law.

5. Retention

We keep data for as long as necessary to provide the Service and to meet accounting/legal requirements. Billing records may be retained for the periods required under applicable law.

6. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of your personal data, and to data portability. You can contact us to exercise these rights.

7. Security

We apply reasonable technical and organizational measures to protect personal data. No system can be 100% secure.

8. Contact

For privacy requests, contact us via the contact information provided on the TORI website.

This document is a template and does not constitute legal advice. You should have counsel review it before going live.