1. Roles of the parties
For workspace data, the customer company is generally the controller or business owner of the personal data, and Aqari acts as a processor or service provider that processes data according to the customer's instructions and the applicable agreement.
2. Processing instructions
Aqari processes personal data to provide hosting, authentication, workflow, document, reporting, support, backup, maintenance, security, and related platform services.
- Categories may include owners, tenants, employees, users, agents, suppliers, and customer contacts.
- Data may include names, emails, phone numbers, IDs, addresses, contract records, payment records, documents, notes, and audit logs.
3. Security measures
Aqari uses reasonable technical and organizational measures designed to protect personal data, including access controls, authentication, authorization, audit records, secure transport, backups, monitoring, and operational controls.
4. Subprocessors and hosting providers
Aqari may use reputable subprocessors for hosting, storage, email, messaging, analytics, security, and support. Aqari remains responsible for selecting subprocessors with appropriate confidentiality and data protection commitments.
5. Data subject requests, return, and deletion
If Aqari receives a request relating to workspace personal data, it may direct the requester to the relevant customer company unless legally required to respond directly. After termination, data export and deletion follow the agreement, retention rules, backup cycles, and legal obligations.
Last updated: June 13, 2026.