Data Protection Overview

v1.0 · May 7, 2026

How Optiviera collects, processes, retains, and protects customer data across all platform operations.

This page describes how Optiviera collects, processes, retains, and protects data across all platform operations. It complements the Privacy Policy and DPA with technical and operational details.

Data Categories Processed

Account & Identity

Name and email address
Role and permissions
Authentication credentials (hashed)
Profile and avatar

Business Data

CRM and customer records
Financial and invoicing data
HR and payroll records
Inventory and order data

Operational Data

Uploaded files and documents
Audit logs and activity records
Backup data
Usage and performance metrics

Data Retention

Data TypeRetention PeriodNotes

Account dataDuration of subscription + 30 daysDeleted upon account termination request

Backup filesAs configured (default 30 days)Manageable in platform backup settings

Audit logs12 monthsFor compliance and security purposes

Financial records10 yearsGerman commercial law (HGB) requirement

Support tickets24 months after resolutionFor quality and legal purposes

Protection Measures

Encryption at rest for database and file storage
Encryption in transit (TLS/HTTPS) for all communications
Multi-tenant isolation — tenant data strictly separated
Role-based access control limiting data access to authorized users
Audit logs for all data access and modification events
Regular backups with encrypted storage
Data export and deletion functionality for customers

Data Subject Rights Support

Right of access — export available through platform settings
Right to erasure — account deletion procedures available
Right to portability — data export in standard formats
Right to correction — data editable through platform interface
For additional requests: [email protected]

Back to Trust Center