Privacy policy
Effective date: 2026-05-07 — placeholder, finalise before launch.
Per-tenant isolation
iqCloud is multi-tenant. Every customer's data is scoped to their tenant via Postgres FORCE ROW LEVEL SECURITY, per-tenant AI Search indexes, per-tenant Foundry projects, and per-tenant Key Vault CMKs. Cross-tenant access requires a SUPER_USER role with audit trail.
Data we collect
Identity and contact information for the customer's authorised users (via AAD B2C), business operational data the tenant entrusts to the platform (bookings, device telemetry, audit events), and platform-side telemetry tagged by tenant and feature_id for cost attribution and reliability.
Retention
Audit events: 365 days. Photo evidence (cleaning QC, IoT compliance): 7 years on immutable storage with legal hold. Voice transcripts: 90 days then summarise-and-purge. Customer can request deletion via DSAR (per the compliance subgraph of the architecture).
Recording disclosure
Voice receptionist calls in two-party-consent jurisdictions (CA, CT, FL, IL, MD, MA, MT, NV, NH, PA, WA) play a disclosure prompt before AI engages. Decline transfers to a human.
Contact
Privacy questions: sebastian@iqcloud.cloud.