Privacy Policy

Last Updated: 19-05-2026

1. Introduction

Shash Tech Solutions ("we," "us," "our," or "Shash Tech Solutions") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use dueam, our SaaS business management platform accessible at https://app.dueam.com (the "Platform") and our marketing site at https://dueam.com (the "Site"). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Platform or Site.

We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the "Last Updated" date of this Privacy Policy. You are encouraged to periodically review this Privacy Policy to stay informed of updates.

2. Information We Collect

Personal Data You Provide

Personally identifiable information, such as your name, email address, and telephone number, that you voluntarily give to us when you register with the Platform, create an organization, or when you choose to participate in various activities related to the Platform and our Services.

Information Collected Automatically (Usage Data)

Information our servers automatically collect when you access the Platform or Site, such as your IP address, your browser type, your operating system, your access times, and the pages you have viewed directly before and after accessing the Platform.

Cookies and Similar Tracking Technologies

We may use cookies, web beacons, tracking pixels, and other tracking technologies on the Site to help customize the Site and improve your experience. The Platform uses cookies for authentication sessions — these are essential for maintaining your logged-in state and cannot be disabled without losing access to the Platform. Most browsers are set to accept cookies by default. You can remove or reject non-essential cookies, but be aware that such action could affect the availability and functionality of the Site.

3. Data We Process on Behalf of Organizations

As a SaaS platform, dueam processes business data (bookings, orders, financial records, customer information, etc.) on behalf of the organizations that use our Platform. We act as a data processor for this organization-scoped data. The organization that created the data is the data controller. We process this data only to provide the Services as directed by the organization and in accordance with our contractual obligations.

4. Sub-Processors

We may engage third-party sub-processors to process organization data on our behalf. Current sub-processors include:

• Cloudflare — CDN and hosting services
• Database hosting provider — storage and processing of organization data

We will notify organizations of any changes to our sub-processors. An up-to-date list of sub-processors is available upon request.

5. Data Residency

Organization data is stored in our database hosting provider's infrastructure. Data residency depends on the region of the hosting infrastructure. For specific data residency information, please contact us at the contact information below.

6. How We Use Your Information

Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the Platform or Site to:

• Provide, operate, and maintain our Platform, Site, and Services.
• Respond to your comments, inquiries, and requests and provide customer service.
• Send you technical notices, updates, security alerts, and support and administrative messages.
• Communicate with you about products, services, offers, promotions, and events offered by Shash Tech Solutions and others, and provide news and information we think will be of interest to you (you may opt-out of these communications at any time).
• Monitor and analyze trends, usage, and activities in connection with our Platform and Services.
• Detect, investigate and prevent fraudulent transactions and other illegal activities and protect the rights and property of Shash Tech Solutions and others.
• Comply with legal and regulatory obligations.

7. How We Share Your Information (Disclosure of Data)

By Law or to Protect Rights

If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others, we may share your information as permitted or required by any applicable law, rule, or regulation.

Third-Party Service Providers

We may share your information with third parties that perform services for us or on our behalf, including payment processing, data analysis, email delivery, hosting services, customer service, and marketing assistance.

Business Transfers

If Shash Tech Solutions is involved in a merger, acquisition, or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.

With Your Consent

We may disclose your personal information for any other purpose with your consent.

We do not sell your personal information to third parties.

8. Data Security

We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse. Any information disclosed online is vulnerable to interception and misuse by unauthorized parties. Therefore, we cannot guarantee complete security if you provide personal information.

9. Data Retention

We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. For organization-scoped data, retention is tied to the organization's active subscription. When an organization is deleted or its subscription is terminated, we will retain organization data for a limited period to allow for data export, after which it will be permanently deleted. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.

10. Your Data Protection Rights

Depending on your location, you may have the following rights regarding your personal data:

• The right to access — You have the right to request copies of your personal data.
• The right to rectification — You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• The right to erasure — You have the right to request that we erase your personal data, under certain conditions.
• The right to restrict processing — You have the right to request that we restrict the processing of your personal data, under certain conditions.
• The right to object to processing — You have the right to object to our processing of your personal data, under certain conditions.
• The right to data portability — You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

Organization administrators have the right to export or delete their organization's data at any time through the Platform's settings.

If you would like to exercise any of these rights, please contact us at the contact information below.

11. Cookies Policy

As mentioned above, we use cookies and similar technologies. Essential cookies are used for authentication sessions on the Platform — these are necessary for the Platform to function and cannot be disabled. Non-essential cookies may be used on the marketing Site for analytics and customization. You can instruct your browser to refuse non-essential cookies. However, if you do not accept essential cookies, you may not be able to use the Platform.

12. Children's Privacy

Our Platform and Site do not address anyone under the age of 13 ("Children"). We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and you are aware that your Child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from a child under age 13 without verification of parental consent, we take steps to remove that information from our servers.

13. Links to Other Websites

Our Site may contain links to other websites that are not operated by us. If you click on a third party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

14. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

15. Contact Us

If you have any questions about this Privacy Policy, please contact us: