Privacy Policy
Pilot draft — last updated 20 August 2026.
This Privacy Policy is a placeholder for Dexsa AI’s pilot phase, describing in plain terms what data the platform holds and how it is used. It is not a substitute for a reviewed privacy notice, and organisations onboarding for a paid pilot should have this reviewed against their own data-protection obligations before relying on it.
1. What we collect
Account details (name, work email, password hash); organisation and location details entered during setup; trading data connected or uploaded by the organisation (sales transactions, stock counts, rota and waste entries); and operational data generated by using the service, such as audit log entries recording who took which action and when, for security and accountability.
2. How we use it
Trading data is used solely to generate the forecasts, recommendations and reports the organisation has requested for its own locations. Account details are used for authentication, session management, and product communications about the organisation’s own account. Data is never used to train models shared across organisations, and is never sold.
3. AI assistant
The AI Assistant answers questions using the organisation’s own data, retrieved through the same data layer as the rest of the platform. Where a third-party language model provider is configured, only the specific figures needed to answer a question are sent to that provider — not raw trading data or other organisations’ information.
4. Data isolation and retention
Each organisation’s data is isolated at the database level and is never visible to other organisations. Data is retained for as long as the organisation’s account is active, and can be exported as CSV at any time. Deletion of an organisation’s data can be requested and will remove it from active use, subject to any audit-log retention required for security purposes.
5. Security
Passwords are hashed, never stored in plain text. Access to data is scoped by role and location, and enforced at the database level as well as in the application. Sessions can be reviewed and revoked at any time from Settings.
6. Contact
Questions about this policy, or requests to export or delete an organisation’s data, can be directed to the Dexsa AI team contact provided during pilot onboarding.