Privacy & Acceptable Use

For the personal data of a client's own customers processed through the Platform, the client is the data controller and Protocore acts as a processor, processing that data only on the client's documented instructions to provide the Service. For operator-account data (the people who use this console), Protocore acts as controller.

The operator console processes, among other things:

• operator identity and access — name, work email, role, tenant, and sign-in events;
• an append-only audit log attributing each privileged action to an operator; and
• tenant business data shown for case handling — read live from the backend and never card-secret or PIN data in clear.

Data is used to operate, secure, and support the Service, to enforce role-based access, to maintain audit and compliance records, and to meet legal and regulatory obligations.

Access is invite-only and role-scoped, traffic is encrypted in transit, the operator surface is network-restricted, secrets are never shown in the interface, and privileged actions are audited. Operators must keep credentials secure and report any suspected compromise.

Protocore uses infrastructure and service sub-processors to deliver the Service. The current list and any international-transfer safeguards are maintained under the governing agreement.

Requests from a client's customers (access, correction, deletion) are handled by the client as controller; Protocore assists as processor. Operator and audit records are retained as required for security and compliance, then deleted or anonymised.

Access this console only for authorised work within your role and tenant. Do not export, copy, or share data beyond what your duties require, and never use access to view data you have no business reason to see. Misuse is grounds for revocation and may be unlawful.