Legal template
Privacy policy
PRE-LAUNCH TEMPLATE ยท final privacy text must match the real production data flows.
Document the actual processing of customer email/order data, Stripe payments and connected-account onboarding, eSIM supplier fulfillment, support logs, retention periods, lawful bases, data-subject rights and international transfers where applicable.
Data minimisation
Do not store raw payment-card data, partner bank logins or supplier secrets in tenant-facing forms. Keep secrets only in private server configuration.