Privacy Policy

Last updated: June 27, 2026

SPUD ("the Platform") is a multi-tenant business dashboard provided by NetRock. Each organization that uses the Platform gets its own workspace, and people who work within an organization sign in with an account that holds a role — Admin, User, or Guest — for that organization. This policy explains what information the Platform collects, how it is used, and how it is protected.

1. Who this applies to

This policy applies to:

Anyone issued an account on the Platform, including Super Admins and organization Admins, Users, and Guests
Any business information that authorized users enter into the Platform on behalf of their organization

2. Information we collect

Account information — name, email address, hashed password, and the role(s) and organization(s) your account is associated with.

Preferences — your chosen theme, display language, and avatar colors, stored against your account so they follow you between sessions and devices.

Organization data — information that authorized users within an organization enter into the Platform as part of normal use of its features.

We do not collect any information beyond what is necessary to operate the Platform, and we do not use analytics, advertising, or tracking technologies.

3. How we use this information

To authenticate users and resolve which organization and role applies to each request
To provide the Platform's features and remember your preferences
To keep each organization's data separated from every other organization on the Platform

4. How we protect this information

Passwords are never stored in plain text — they are hashed using industry-standard one-way hashing
Access to data is restricted according to each user's assigned role within their organization
Data is stored in a private, access-controlled database and is not exposed publicly
Each organization's data is logically separated from other organizations on the Platform

5. Data sharing

We do not sell or share data with third parties for marketing purposes. Information may be shared with service providers strictly necessary to operate the Platform, under the same confidentiality obligations described in this policy.

6. Data retention

Account and organization data is retained for as long as your account or organization remains active on the Platform, or as required by NetRock's internal record-keeping obligations. Data is deleted or anonymized on request, subject to legitimate business or legal retention requirements.

7. Your rights

You may request access to, correction of, or deletion of your personal information by contacting your organization administrator or NetRock directly.

8. Changes to this policy

This policy may be updated from time to time to reflect changes to the Platform or applicable requirements. Continued use of the Platform after changes take effect constitutes acceptance of the updated policy.

9. Contact

Questions about this policy can be directed to NetRock at contact@netrock.hr.