Privacy Policy

1. Introduction

Welcome to BRANE ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our consultant billing and project management system.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.

2. Information We Collect

We collect information that you provide directly to us, including:

• Account Information: Name, email address, phone number, and employee/consultant identification
• Professional Information: Job title, department, hourly rates, and project assignments
• Time and Expense Data: Timesheet entries, expense reports, and supporting documentation
• Authentication Data: Login credentials and Microsoft SSO tokens (if applicable)
• Communication Data: Messages and correspondence within the platform

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process timesheets, expenses, and generate invoices
• Authenticate users and manage access permissions
• Send notifications about approvals, submissions, and system updates
• Generate reports and analytics for business operations
• Comply with legal obligations and enforce our terms of service

4. Data Sharing and Disclosure

We may share your information in the following circumstances:

• With Your Organization: Your employer or contracting organization has access to your work-related data
• With Clients: Project-related hours and expenses (excluding rate information for consultants) may be shared with clients
• Service Providers: Third-party vendors who assist in operating our platform
• Legal Requirements: When required by law or to protect our rights

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Secure authentication mechanisms including Microsoft SSO
• Role-based access controls
• Regular security audits and monitoring
• Secure document storage in encrypted cloud storage

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required or permitted by law. Financial and billing records may be retained for extended periods to comply with legal and regulatory requirements.

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal information
• Export: Request a copy of your data in a portable format
• Objection: Object to certain processing of your data

To exercise these rights, please contact your system administrator or reach out to us using the contact information provided below.

8. Cookies and Tracking

We use essential cookies and similar technologies to maintain your session and provide core functionality. We do not use third-party tracking or advertising cookies. Session data is stored securely and is necessary for the proper operation of the application.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date. You are advised to review this privacy policy periodically for any changes.