1. Two Different Roles — Please Read First
Your account data (this Policy). When you sign up and use PremiseCore, we collect Personal Data about you and your staff — for example, your name, email, and billing contact. For that data, PremiseCore is the Data Fiduciary and this Policy applies.
Your customers’ data (not this Policy). The data you put into PremiseCore about your own members, prospects, and visitors is yours. For that data, you are the Data Fiduciary and PremiseCore is only your Data Processor — it is governed by our Data Processing Addendum, not this Policy. We do not use it for our own purposes, and we do not use it to compete with you.
2. What We Collect About You
Account details — name, work email, workspace name, role, and password (stored securely). Billing details — billing contact, plan, and transaction records (payments are processed by our payment processor). Support and communications — messages, feedback, and issue reports you send us. Usage data — logs and diagnostics needed to run, secure, and improve the Service.
3. Why We Use It
We use your Personal Data to provide and secure the Service, manage your account and billing, provide support, send service-related communications, meet legal and tax obligations, and improve the Service. We rely on your consent and on the necessity of providing the Service you requested.
4. Who We Share It With
We share Personal Data only with service providers that help us run the platform (our sub-processors — for example, hosting, database, email, payment, e-signature, monitoring, and AI providers), under appropriate confidentiality and data-protection terms, and where required by law. The current sub-processor list is available on request and in Annex B of the Data Processing Addendum.
Some features, including Creative Studio and Workspace AI, use trusted third-party AI providers (such as Anthropic, Google, and OpenAI) to generate content and answers. Data submitted to these features is processed by those providers solely to deliver the feature, as service providers under limited-use terms; it is not sold, shared for their own independent use, or used to train their models.
5. Your Rights
Subject to the DPDP Act, you may ask to access a summary of your Personal Data, correct or complete it, erase it, and withdraw consent. You may also nominate another person to exercise your rights in the event of death or incapacity. To exercise a right, contact our Grievance Officer below.
6. Grievance Officer
If you have a concern about how we handle your Personal Data, contact our Grievance Officer at grievance@premisecore.com. We will acknowledge and respond within the timelines required by law.
7. How Long We Keep It
We keep your Personal Data for as long as your account is active and as needed for the purposes above, then delete or de-identify it — except records we must retain by law (for example, invoice and tax records, commonly retained for several years).
8. Security
We use appropriate technical and organisational measures — including tenant isolation, access controls, encryption in transit and at rest, and monitoring — to protect Personal Data. No system is perfectly secure, but we work to protect your data and to respond quickly to incidents.
9. Data Breaches
If a personal-data breach occurs that affects you, we will notify you and the Data Protection Board of India as required by law, and take steps to mitigate it.
10. Where Your Data Is Processed
Your Personal Data is hosted with our providers, as listed in our sub-processor list. We do not transfer Personal Data to jurisdictions restricted under the DPDP Act except as permitted by law.
11. Changes and Contact
We may update this Policy and will post the new version with its effective date. For any question, contact privacy@premisecore.com.