Privacy Policy

CorperaHQ is operated by Lacspace Technologies, headquartered in Kathmandu, Nepal. We are the data controller for data submitted via the marketing website (corperahq.com) and the data processor for tenant data inside the platform — your organisation is the controller of that tenant data.

From visitors to corperahq.com:

• Form submissions (name, email, phone, company, message) when you fill in a CTA, contact, demo, or newsletter form.
• Basic technical metadata such as IP address and user-agent, used for rate-limiting and abuse prevention.
• If you accept analytics cookies, anonymised aggregate page-view data.

From customers using the platform: whatever your workforce members enter into the modules you've enabled. This is your tenant data.

• To provide and improve the Service.
• To send transactional emails (signups, password resets, payment receipts).
• To send product updates if you've opted in.
• To enforce our terms (e.g. spam-detection on public endpoints).

We do not sell personal data. We do not share it with third parties except sub-processors strictly needed to run the Service (Mongo Atlas, AWS, our email provider).

Tenant data is stored in MongoDB Atlas (AWS Mumbai region). Files are stored in AWS S3 (Mumbai). Encrypted in transit (TLS 1.2+) and at rest (KMS).

You have the right to access, correct, export, or delete your personal data. From the platform, every user can do this directly from their profile page. For marketing data, email privacy@corperahq.com. We respond within 7 working days.

Tenant data: kept as long as your subscription is active, plus 30 days after termination (export window). Marketing leads: kept for 24 months from last contact, then anonymised. Logs: 90 days rolling.

We use strictly-necessary cookies (session, theme preference). Analytics cookies are opt-in. We do not use ad cookies.

Data-protection inquiries: privacy@corperahq.com. For DPO matters, the same address; we'll route to the right person internally.