Data processing terms
Processor commitments for the personal data in your workspace and vaults.
Roles
You are the controller of workspace and vault data. Finsec Associates Limited (trading as TriangleOS) is the processor and acts on your instructions, which are the actions you take in the portal.
Purpose limitation
Vault records are processed only to store them for you, to build the Meta custom audiences you ask for, and to keep the service secure.
Security measures
Workspace data is reachable only through the app's server, which checks that you belong to the workspace. Data is encrypted in transit, Meta tokens are encrypted at rest, and phone numbers are hashed before they're sent to Meta. Report a suspected incident to security@metarial.xyz.
Sub-processors
Supabase (database, EU), Cloudflare (hosting), Stripe (payments), Google (Gemini AI), Anam (live avatar) and Meta (for campaigns, audiences and events you choose to send).
Assistance and deletion
We help with access, correction and deletion requests, and delete workspace data on termination unless the law requires us to keep it.
This summary is written for clarity and is not legal advice — have your own counsel review it before you rely on it commercially.