Privacy Policy

Last updated: 2026-08-12. This is a v0 operational policy for early access—not formal legal advice.

Who we are

Laterus (laterus.org) provides construction, facility, and IT operations software for Catholic institutions and related contractors.

Data we collect

• Account: email address, optional display name
• Organization data: org name/type, sites, projects, assets, work items, memberships
• Quote / demo requests: name, work email, organization, optional phone, interest area, and message submitted from the public marketing form
• Occupant work requests: name, email, chosen site, and request text submitted from /request — stored as a facility work item so stewards can respond
• Work attachments: images and PDFs (8MB cap) attached to work items, stored on Cloudflare (R2 when bound, otherwise D1) for the organization only
• Technical: session cookies, basic security logs (e.g. rate limits, hashed IP for abuse control)

We do not intentionally collect sacramental records, donor data, or parishioner pastoral profiles in v0.

How we use data

To authenticate you, operate the multi-tenant application, respond to quote and demo requests, prevent abuse, and improve reliability. Marketing form submissions are used only to follow up on your request—not sold or used for third-party advertising.

Cookies

We use a single strictly necessary session cookie (laterus_session) after sign-in. No advertising or third-party analytics cookies in v0.

Processors

Infrastructure is hosted on Cloudflare. If email delivery is enabled, a transactional email provider (e.g. Resend) processes your email address to send magic links.

Retention

Account and organization data is retained while the organization is active. Magic-link tokens expire within minutes. Sessions expire after inactivity/TTL.

Contact

Privacy questions: use the operator email on your account domain or contact the Laterus operator who invited you.