1. Introduction
Singleton SD (“we,” “our,” or “us”) operates Platform Kit available at plattform-kit.poc.singletonsd.com and app.plattform-kit.poc.singletonsd.com (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
2. Information We Collect
Account information
When you sign in, we may collect:
- Name and email address from Microsoft Entra ID
- Tenant or organisation identifiers associated with your account
- Role and session claims used for authentication and coarse authorisation
Service data
We store content and records you create or manage through the Service, such as:
- Tenant, contact, support, subscription, and related pillar records
- Audit and reporting events generated by Service activity
- Support interactions and operational notes
Usage and diagnostic data
- Application logs, feature usage, and errors
- Device and browser information (type, OS, approximate location at city/country level)
- IP address, session timing, and performance/diagnostic signals
3. How We Use Your Information
- Provide, maintain, and secure the Service
- Authenticate users and enforce tenancy / access controls
- Send transactional notifications (email, SMS, or WhatsApp where configured)
- Detect abuse, debug issues, and improve reliability
- Comply with legal obligations
4. Data Storage and Security
Your data is hosted on Microsoft Azure in Australia East. Secrets are stored in Azure Key Vault. We use TLS in transit, encryption at rest where provided by Azure services, role-based access controls, and managed identities for cloud access.
If a personal-data breach occurs, we will notify affected users and relevant authorities as required by applicable law.
5. Third-Party Services
We use providers that may process data to operate the Service:
| Service | Purpose | Data shared |
|---|---|---|
| Microsoft Entra ID | Authentication | Identity claims, session data |
| Neon PostgreSQL | Application data storage | Service records |
| Azure App Configuration / Key Vault | Configuration and secrets | App settings (secrets in Key Vault) |
| Azure Service Bus | Events and jobs | Message payloads for domain events |
| Azure Application Insights | Traces, exceptions, performance diagnostics | Request/telemetry events, browser diagnostics, errors |
| Azure Log Analytics | Centralised log retention and alerting | Structured logs and App Insights workspace data (30-day retention) |
| Forward Email | Transactional email | Email address, message content |
| SMS gateway / WhatsApp Cloud API | Outbound notifications | Phone number, message content |
Each provider has its own privacy policy governing its processing.
6. Data Sharing
We do not sell your personal information. We may share data:
- With your organisation’s administrators for tenant management
- With service providers listed above, solely to operate the Service
- When required by law, subpoena, or court order
- In connection with a merger, acquisition, or asset transfer (with notice)
7. Data Retention
- Account and service data: for the life of the account, then deleted or anonymised within about 30 days after deletion (unless law requires longer retention)
- Usage logs: typically up to 12 months
- Application Insights / Log Analytics telemetry: 30 days (workspace default)
- Support records: typically up to 3 years
8. Your Rights
Depending on your location, you may request access, correction, deletion, or export of your personal data, and object to certain processing. Contact us at the email below to exercise these rights.
9. Cookies
For this PoC we use cookies and similar technologies primarily for authentication and session continuity. You can control cookies through your browser settings; blocking them may prevent sign-in.
10. International Data Transfers
The Service is hosted in Australia. If you access it from elsewhere, your data may be transferred to and processed in Australia. We rely on appropriate contractual and technical safeguards with sub-processors where required.
11. Children’s Privacy
The Service is not intended for users under 16. We do not knowingly collect personal information from children under 16.
12. Changes to This Policy
We may update this policy from time to time. Material changes will be posted on this page with an updated date. Continued use of the Service after changes constitutes acceptance where permitted by law.
13. Contact Us
Privacy inquiries: hello@singletonsd.com
Singleton SD · Platform Kit · plattform-kit.poc.singletonsd.com