Privacy notice

1. What we process

Account data (name, organisation, role, contact details), authentication data (password hash, second factor), and the operational records needed to prove what was exchanged. Data published through an offer is controlled by the participant that published it, not by Alambic Labs.

2. Why we process it

To operate the service, to authenticate people and agents, to keep the audit trail verifiable, and to meet legal obligations. Marketing communication is opt-in and separate.

3. Where it lives

Each participant’s node is operated in the infrastructure agreed for that engagement. Where Alambic Labs hosts a node, hosting stays within the European Union unless an order form states otherwise.

4. Retention

Account data is kept while the seat is active and for the period required by the applicable order form afterwards. Audit records are kept for the retention window agreed with the participant so that past exchanges stay verifiable.

5. Your rights

You may request access, correction, export or deletion of your account data. Requests are handled within the statutory deadline; records that must be retained for audit are excluded from deletion but minimised.