Data Processing & Data Handling
1. Customer Data
Customer Data includes business and operational information submitted to Inocean by a Customer.
Examples include:
- orders;
- products;
- recipes;
- inventory;
- purchasing records;
- suppliers;
- employee accounts;
- reservations;
- customer records;
- reports;
- configuration data.
2. Purpose
Maginut processes Customer Data only as reasonably necessary to:
- provide the Services;
- maintain the platform;
- process transactions;
- provide support;
- perform backups;
- maintain security;
- diagnose errors;
- comply with legal requirements.
3. Data Ownership
The Customer retains ownership of its business data.
Maginut does not sell Customer Data as a product.
4. Access by Maginut
Authorized Maginut personnel may access Customer Data when reasonably necessary for:
- technical support;
- troubleshooting;
- security investigations;
- system maintenance;
- backup recovery;
- service administration.
Access should be limited to what is reasonably necessary.
5. Third-Party Service Providers
Customer Data may be processed by infrastructure and service providers used to operate Inocean.
Maginut expects such providers to maintain appropriate security and confidentiality protections.
6. Payment Information
Where payment processing is provided by a third-party payment processor, payment card information is generally processed directly by that provider rather than stored by Maginut.
Customers should review the applicable payment provider's terms and privacy policy.
7. Data Location
Depending on the deployment, Customer Data may be hosted in Canada, the United States or another jurisdiction selected for the applicable service.
Custom customers may have additional data-location or infrastructure requirements under a separate agreement.
8. Security
Maginut uses reasonable safeguards including:
- access controls;
- authentication;
- encrypted communications;
- database access controls;
- backups;
- monitoring;
- infrastructure security measures.
9. Customer Responsibility
Customers remain responsible for:
- the legality of information they enter;
- employee access;
- customer notices and consents;
- appropriate retention periods;
- configuration of permissions;
- compliance with tax, employment, food safety and other applicable requirements.