Privacy Policy

1. Introduction

Welcome to Pandonymus Workshop ("we", "our", or "the Platform"). We respect your privacy and are committed to protecting the personal and business data you share with us through our multi-tenant SaaS management software.

This Privacy Policy explains how we collect, use, store, and protect your information when you register, purchase a subscription, or use our services.

2. Multi-Tenant Architecture & Data Isolation

Our SaaS application is built on an isolated multi-tenant database architecture. Each subscribed repair shop operates with its own isolated database instance (tenant_id) and dedicated subdomain.

3. Information We Collect

We collect the following categories of information:

• Account & Registration Data: Business name, administrator email, designated subdomain, and contact telephone number.
• Operational Workshop Data: Customer lists, repair orders, equipment IMEI/serial numbers, inventory items, and receipts entered by your authorized users.
• Payment & Billing Data: Payment transactions are handled securely by our payment processor, Stripe. We do not store full credit card numbers on our servers.
• Technical & Log Data: IP addresses, browser types, operating system details, timestamps, and error logs collected for system diagnostics and security monitoring.

4. How We Use Your Information

We process your data for the following purposes:

• To provision, manage, and maintain your workshop's tenant instance and subdomain.
• To authenticate users, manage role-based permissions, and ensure platform security.
• To process subscription payments and issue corresponding activation licenses.
• To provide customer support and technical troubleshooting.
• To deliver automated system notifications (e.g. daily summaries, low-stock alerts, customer tracking updates).

5. Third-Party Integrations & Processing

We work with trusted third-party service providers to power certain features:

• Stripe: Payment processing, automated subscription handling, and fraud detection.
• AI Assistance: When utilizing optional AI business diagnostics, data is processed ephemerally and strictly anonymized without training public models.
• Transactional Email / SMS / WhatsApp: Used solely to send operational updates or ticket receipts requested by the user.

6. Data Security

We implement industry-standard technical and organizational security measures, including 256-bit SSL/TLS encryption for all data in transit, strict database isolation, automated daily encrypted backups, and rate-limiting protections against unauthorized access.

7. Your Rights & Data Portability

As a workshop administrator, you retain ownership of your business data. You have the right to access, export, modify, or request deletion of your account and associated tenant data at any time by contacting our support team.

8. Contact Information

If you have any questions, inquiries, or privacy requests regarding this policy, please reach out to us: