Privacy policy
Draft for review by a lawyer. Replace the bracketed items before launch.
This policy explains which personal data Scintilla Parcels handles, why, and who receives it. [Agency name] is the controller of the data its staff enter. Scintilla processes that data for the agency under the data processing agreement.
Data we handle
Staff accounts: name, email address, a hashed password, role and sign-in sessions. Parcels: operator, recipient name as written on the label, spot and region, status and timestamps. Activity log: who created, moved, picked up, voided or restored a parcel, and when. Daily counts of label reads per site and per person, to enforce limits. Label photos: the photo is sent to an AI model to read the operator and name. We do not store the photo. The browser keeps it only until the parcel is saved.
Who receives the data
Cloudflare hosts the app, the database and the live sync. The label photo passes through OpenRouter to the AI model that reads it. We do not sell data and do not use it for advertising.
How long we keep it
Parcel records and the activity log are kept while the agency uses the service. Retention period: [to confirm]. Automatic deletion of old records is not available yet; the agency can ask us to delete records.
Your rights
You can ask for access to, a copy of, correction or deletion of your data, and you can object to some processing. Staff should first ask their agency, which can contact us. You can complain to your data protection authority; in Italy this is the Garante per la protezione dei dati personali.
Cookies
We use only strictly necessary cookies: one sign-in session cookie and one cookie that remembers your language. We use no tracking or advertising cookies.
Contact
[Controller name], [postal address], [privacy contact email].