Privacy Policy

Last updated: [date]

This policy explains what data Handoff collects, why, and how it's handled.

1. What we collect

• Account data — name, email, and organisation details you provide when signing up.
• Microsoft 365 data — accessed only via the specific, disclosed permissions you grant through Microsoft's own consent screen when connecting your tenant (e.g. directory/user data, licence assignments, group memberships, mail settings — scoped to what each feature you use actually requires).
• Usage data — conversation history with Pip, confirmed plans, and audit logs of actions taken through the Service.
• Billing data — handled by our payment processor (Stripe); we do not store full card details ourselves.

2. How we use it

To provide the Service (executing confirmed plans, showing your organisation's health and history), to process payment, to respond to support requests, and to improve the product.

3. AI processing

Messages you send to Pip are processed by a third-party AI model provider to generate responses and proposed plans. No plan is executed without your explicit confirmation, regardless of what the AI proposes.

4. Sub-processors

We use third-party services to operate Handoff, including cloud hosting, our AI model provider, payment processing (Stripe), and transactional email delivery. [Full sub-processor list to be added.]

5. Data retention

We retain account and usage data for as long as your account is active, and for a limited period afterward as required for legal/accounting purposes. [Specific retention periods to be defined.]

6. Your rights

Depending on your jurisdiction, you may have rights to access, correct, or delete your personal data. Contact us to exercise these rights.

7. Revoking access

You can disconnect your Microsoft 365 tenant from Handoff at any time from Settings, which stops any further access to your directory data.

8. Contact

Questions about this policy: hello@gethandoff.uk