Privacy Policy

1. Information Processed

DM3Oi may process account and profile information, organization information, customer and contact information, case and task data, service requests, questions and responses, communications, reports, authentication and security information, and technical and usage information generated through use of the service, including page visits, browser or device characteristics, referral information, and interaction evidence used to understand service usage and reliability.

The specific information processed depends on how the customer organization configures and uses DM3Oi.

2. How Information Is Used

Information may be used to provide and operate DM3Oi; authenticate users; maintain organization accounts and permissions; manage cases, tasks, service requests, communications, and customer workflows; generate operational reports and intelligence; maintain audit and delivery records; secure and troubleshoot the service; prevent misuse; and improve service reliability and functionality.

3. Customer Organization Responsibilities

The customer organization is responsible for determining what Customer Data it collects and submits, whether that collection is appropriate and lawful, and whether notices, permissions, or consents are required from customers, contacts, employees, contractors, or other individuals.

DM3Oi processes Customer Data on behalf of the customer organization as reasonably necessary to provide, maintain, secure, and support the service.

4. Service Providers

DM3Oi may use service providers for functions such as hosting, database services, authentication, storage, email delivery, monitoring, and other infrastructure required to operate the service. Information may be processed by those providers to the extent necessary to perform their services.

5. Disclosure of Information

Information may be disclosed when directed or authorized by the customer organization, when necessary to provide or secure the service, to service providers acting on behalf of DM3Oi, to investigate misuse or protect rights and safety, or when required by applicable law or valid legal process.

DM3Oi does not authorize service providers to use Customer Data for unrelated purposes merely because they process it to support the service.

6. Data Security

DM3Oi uses administrative, technical, and operational measures designed to protect information against unauthorized access, alteration, disclosure, or destruction. No internet-connected or hosted system can guarantee absolute security.

Customer organizations and authorized users are responsible for protecting their devices, authentication methods, account access, and credentials.

7. Data Retention

Information may be retained for as long as reasonably necessary to provide the service, maintain business and audit records, comply with legal obligations, resolve disputes, enforce agreements, preserve security records, and support legitimate operational requirements.

Retention periods may differ by information type and by the customer organization's service status or contractual requirements.

8. Operational and Audit Records

DM3Oi may maintain records relating to organization activity, account access, workflow events, communications, security events, and administrative actions as necessary to operate, secure, audit, and support the service.

Certain operational and audit records may be retained as durable historical evidence even after related workflow or account information changes.

9. Access and Correction

Authorized users may be able to review or update certain account and organization information through DM3Oi. Requests concerning Customer Data generally should be directed to the customer organization that controls that information.

Requests concerning information maintained directly by DM3Oi may be handled as required by applicable law and after appropriate identity or authority verification.

10. Product Measurement and De-identified Information

DM3Oi may analyze usage, workflow, operational, and technical information to evaluate service performance, identify patterns, improve functionality and reliability, and understand how the service performs in real-world organizational use.

Aggregated or de-identified information may be used for product analysis, benchmarking, research, service improvement, and public descriptions of DM3Oi performance or results when the information does not reasonably identify a customer organization, customer, or individual user.

Identifiable Customer Data, customer organization names, testimonials, and organization-specific results are not used for public marketing without separate authorization.

11. Changes to This Policy

DM3Oi may update this Privacy Policy as the service, legal requirements, or data practices change. The service may identify a new policy version when a new version is published.

12. Contact

Privacy questions may be submitted through the organization's established DM3Oi support or administrative contact channel.