Policy updates

[ParadauxIO]

This PR is for a large slew of policies and updates to existing policies we need prior to any form of public or private release.

GDPR Compliance

Ensure the privacy policy explicitly informs users of their rights under the GDPR

• Right to not process for marketing purposes

• May access, change/modify your personal information (accessing/rectifying)

• Ability to download personal data (portability)

• Legal basis for processing

  • explicit consent
  • performance of a contract between two parties
  • processing due to legal obligation
  • to protect data owner's vital interests
  • necessary to protect a public interest or to excessive official authority
  • for legitimate interests as long as fundamental rights/freedoms are not infringed

• Named data protection officer

• Data handling / Fair Processing Notice

Terms of service

Before we launch we must decide what is appropriate for our users to utilize our platform from, and to ensure our authority over our own services.

This particular list will be added onto following a meeting.

SLA

Ensure that no service level agreement is given or implied for any non-paying plans or trials.

[ParadauxIO]

In the wake of the OVH Disaster, I think it's appropriate we draft up a disaster recovery plan.