Your inventory is your commercial asset — prices, margins, who bought what. Below is every answer a buyer asks us, in the order they ask.
Every agency gets its own instance and its own database. Your records are not rows in a shared table, so there is no query that could return someone else’s unit — or yours to them. Our engineers reach your instance only through a logged request.
On Oracle Cloud infrastructure inside the European Union. It does not leave that jurisdiction, and we will name the region in the contract.
A full export of your database in a machine-readable format, on request, is written into the contract. It is an obligation, not a paid extra and not a favour at parting. Running the system on your own infrastructure is a separate conversation we are happy to have.
You are the controller, we are the processor, and we sign a data processing agreement saying so. Every subcontractor that touches data is listed publicly and the list is kept current. Your workspace serves its own fonts and loads nothing from an external CDN, so your buyers’ IP addresses reach nobody but us.
Access is scoped to specific projects: an agent sees their own and not the rest. Revoking a permission reaches open browser tabs immediately, without waiting for a re-login. The change log is append-only, so nobody can rewrite what they did. Client links carry an expiry and a device limit.
No less than 99.9% of the time each month — that is written into the contract, not promised in passing. Planned work happens in a window agreed with you and does not count towards it.
Nobody. Your data is not used to train models, not sold, and not aggregated into market analytics we sell to anyone else. Systems that publish market benchmarks build them out of customer data. We do not.
