PRIVACY NOTICE (template — review with counsel before relying on it)

Controller: Productify / Mímra.
What we store: your name, email, organisation membership and role, login sessions
(with IP + user agent for security), consent records, and any NDA signatures you make.
Why: to operate your account, secure it (2FA, audit log), and record agreements.
Your rights (GDPR): access & portability (export your data), rectification,
erasure ("delete my account"), and to withdraw consent. Executed agreements and the
security audit log are retained where the law requires (Art. 17(3)).
Retention: account data for the life of the account; erased on request except records
we must keep for legal reasons.