Privacy Policy

Who we are

SharpOS is operated by SharpHaw. We provide a private dashboard for client collaboration, operations, audits, media, analytics, billing, and related workspace features.

Data we collect

• Account data, such as name, email address, authentication records, and role assignments.
• Organization data, such as workspace settings, memberships, invites, and feature availability.
• Workspace content, such as pages, boards, customers, audit records, comments, media assets, and files that users add to SharpOS.
• Billing and subscription data processed through Stripe when billing features are enabled.
• Limited product analytics after acknowledgement, such as visited dashboard paths and organization-scoped product events.
• Security and operational logs, such as device, browser, IP, and request metadata needed to operate and protect the service.

How we use data

• To provide, secure, maintain, and improve SharpOS.
• To authenticate users and enforce organization, role, and feature permissions.
• To support clients, investigate issues, prevent abuse, and monitor service reliability.
• To process billing, subscriptions, and account administration where applicable.
• To comply with legal obligations and enforce applicable agreements.

Legal grounds

Depending on the activity, we process personal data to perform a contract, comply with legal obligations, pursue legitimate interests such as platform security and service improvement, or on the basis of consent where consent is required. We do not use consent where another legal ground is required for the service to operate.

Analytics and cookies

We use essential cookies for authentication, preferences, and application state. Product analytics only starts after the in-app acknowledgement is accepted.

We minimize analytics payloads and avoid sending page query strings, names, email addresses, organization names, or organization slugs to PostHog.

Sharing and subprocessors

We use trusted subprocessors for hosting, database, authentication, email, billing, analytics, storage, and optional AI or audit integrations. The current list is available on the Subprocessors page.

We do not sell personal data.

Retention and deletion

We retain account, workspace, Support conversation, billing, analytics, and security data for up to one year, then delete or anonymise it. Organisation and content deletion flows are available within the service where authorised. We may retain limited information for longer where necessary to meet legal obligations, resolve disputes, enforce agreements, prevent abuse, maintain security, or allow backups to complete their normal replacement cycle.

International transfers

SharpOS and its service providers may process information in more than one country. Where personal data is transferred outside the United Kingdom, European Economic Area, or another protected jurisdiction, the applicable agreement and provider safeguards govern the transfer. The current subprocessor list identifies the providers used for the service.

Your rights

Depending on location, individuals may have rights to access, correct, delete, restrict, object to, or receive a copy of their personal data, and to withdraw consent where consent is the basis for processing. Individuals may also have the right to complain to their local data-protection authority. Requests should be sent through the client account owner or to SharpHaw directly.

Contact

For privacy questions or requests, contact SharpHaw at contact@sharphaw.com or through the support channel provided in your client agreement.