Privacy information

Draft update — owner and legal review required. Prepared October 3, 2026. The details below must be checked against actual business practices before final adoption.

ConcordiaPax collects information you choose to provide, along with limited technical and service records needed to operate, secure, and improve our website and client services.

Client portal records are access-controlled by organization. We use service providers only where needed to deliver contracted services, process hosted payments or signatures, and maintain security and reliability.

To ask about your information or request a correction, contactsupport@concordiapax.net.

Scope and information involved

This notice covers the ConcordiaPax Marketing website, client portal, and related account and service communications. Information may include your name, business and contact details, inquiry messages, organization membership, onboarding responses, shared project files, approvals, support requests, and billing references. Technical records may include IP addresses, browser details, authentication events, and logs used to operate and protect the service.

How information is used

We use relevant information to answer inquiries, provide agreed services, manage workspace access, deliver account and project updates, process billing through payment providers, resolve support issues, and investigate misuse. Account emails such as invitations, recovery instructions, and security notices support your use of the service; they are distinct from promotional communications.

Providers and authorized access

The current service uses Supabase for account access and portal data, Cloudflare for site delivery and network services, Resend for email delivery, and Stripe for hosted payment processing. Availability of other integrations depends on your service arrangements. Providers process information needed for their role under their applicable terms. Project records are available to authorized organization members and assigned personnel according to their access. Payment details entered in hosted checkout are handled by the payment provider; do not send card details to our support inbox.

Browser storage and email

The portal uses browser storage to maintain sessions and workspace state. Clearing that storage or signing out can affect access. Hosting and security services may use additional technical storage needed to serve and protect the site. Email delivery can produce status and failure records. The owner review must confirm any optional analytics, tracking, or advertising technologies before making further disclosures.

Retention, requests, and security

We retain records for two years from collection. If you request deletion, we purge your files, including backup copies, within 45 days. Government contracts and requests for quotation (RFQs) are retained for six years.

Contact support to ask about access, correction, or deletion. We may need to verify your identity and authority for an organization before handling a request. Records subject to the six-year government retention period are handled under that longer period.

Access controls and other safeguards help protect information, but no service can promise absolute security. Keep passwords and verification codes private. Report unexpected account changes through account support.

Updates and questions

This service is intended for business use. Questions about this notice or information handled on behalf of your organization can be sent to support@concordiapax.net. Material changes to this notice should be identified with an updated date. Regional rights, business contact details, retention periods, and any additional disclosure duties remain part of the review noted above.