Privacy Policy

Last updated: 12 October 2026

This policy explains what personal data Assemble handles and why.

What we collect

• Account data: name, email, hashed password, role.
• Usage data: logs, device and browser information, security and audit events.
• Content you store: pages, media and your own customers' data, which you control.

Roles

For account holders, we are the data controller. For your site visitors' and customers' data, you are the controller and we are your processor.

How we use it

To provide and secure the Service, send transactional email and notifications, prevent abuse, and meet legal obligations. We do not sell personal data.

Sharing

Only with infrastructure and service providers needed to run the Service (hosting, email delivery), under confidentiality obligations, or where the law requires.

Security

Tenant data is isolated, secrets are encrypted at rest, uploads are malware-scanned and access is role-controlled.

Retention and your rights

We keep data while your account is active and for a limited period afterwards for backups and legal needs. You can request access, correction or deletion by emailing us.

Cookies

We use essential cookies for sign-in and sessions, and privacy-respecting analytics.

Questions? Write to [email protected].