Privacy Policy
What personal data this system collects, why, how long it is kept, and the rights you can exercise.
企業框架系統 ("the system") is deployed and operated by your organization, which acts as the controller of the personal data. This page explains how the system processes personal data while providing its services.
Scope
This policy covers the features you use through the web interface and the API of this system. Managed network devices, external services integrated by your organization, and other websites reached through links are outside its scope.
Data we collect
- Account data: user name, name, e-mail, phone number, assigned roles and tenant, and sign-in related settings such as two-factor authentication.
- Usage records: sign-in time and source IP, browser information, audit records and operation history, used for security auditing and troubleshooting.
- Operational data: devices, backups, credentials, notifications and other business records you create in the system, which may contain personal data you entered.
- Technical data: cookies and interface preferences in local storage; see the cookie policy for details.
Purposes of processing
The system processes the data above to manage accounts and permissions, operate network devices, record and audit operations, deliver notifications and support, and meet legal obligations. The legal bases are performance of a contract, compliance with legal obligations, and your organization's legitimate interest in information security.
Sharing of data
The system does not sell personal data. Data is disclosed only as necessary to administrators authorized by your organization, to commissioned service providers (such as hosting or e-mail delivery), or to authorities entitled to request it by law. In multi-tenant deployments, tenant data is isolated from other tenants.
Retention
Personal data is kept for as long as the account exists. Audit and sign-in records are retained according to your organization's retention policy and cleaned up afterwards. Personal data packages you request for download are deleted automatically after the retention period configured in the GDPR settings.
Data security
The system protects data with encrypted transport, password hashing, encrypted storage of sensitive settings, permission control and operation auditing. Please keep your credentials safe, and enabling two-factor authentication is recommended.
Your rights
You may access and correct your personal data, request a copy of it, or ask for your account to be deleted. After signing in, the Personal data page lets you download your data or submit a deletion request. Some administrator accounts cannot delete themselves because the system needs them; please contact a system administrator instead.
Changes to this policy
When this policy is revised, the last updated date on this page changes accordingly; significant changes are additionally announced within the system.
Contact us
If you have any question about this policy, or want to exercise your rights regarding personal data, please contact your organization's system administrator or data protection contact.