Skip to content

Legal

Privacy notice

Last updated: August 11, 2026

Public website

The static website delivered from this repository contains no analytics SDK, advertising tracker, contact form, or nonessential browser cookie. If you email us, your message and address are processed by the applicable email providers so we can respond. Hosting providers may retain ordinary request and security logs under their own operational policies.

Registration and account security

When you request or use an open-preview workspace, Exasum processes the information needed to establish identity, record authority, and protect access, including:

  • email address, name, account status, workspace membership, and role;
  • workspace-registration, invitation, verification, recovery, and session records;
  • password hashes, hash-only bearer credentials, encrypted multi-factor secrets, security events, and rate-limit records; and
  • the terms version accepted for each workspace and per-user onboarding preferences.

Personal and company email addresses are accepted. Disposable email domains are rejected to preserve a durable account and recovery channel.

Workspace information

A workspace can process the information required to operate a consolidation service, including:

  • entities, groups, dimensions, mappings, rates, rules, and access scopes;
  • financial imports, source details, submissions, approvals, adjustments, publications, reports, and audit records; and
  • operational logs needed to diagnose reliability, correctness, and security issues.

Purpose and control

This information is used to deliver and secure the requested workspace, resolve current authority, communicate about access, derive setup progress, produce consolidation results, preserve audit evidence, and diagnose the service. Workspace financial data is not used here for advertising or data-broker activity. Workspace Owners control membership and role assignment within the product.

Retention, location, and preview limits

Universal retention periods, deployment regions, subprocessors, deletion schedules, certifications, and international-transfer mechanisms have not yet been published for the open preview. Do not provide production or regulated data until those requirements have been confirmed for your use. Security and audit records may need to outlast active access where necessary to protect the service or establish what occurred.

Questions and requests

Contact privacy@exasum.com with a privacy question or request. Applicable rights and response obligations depend on the relevant jurisdiction and any separate written agreement.