01.Data Controller & Scope

This Privacy Policy explains how MV&G Systems (“MVG”, “we”, “us”, or “our”) collects, processes, and protects your information when you access or use The Margin Console by MV&G accessible at app.mvg.systems and associated websites including mvg.systems (collectively, the “Service”).

[PLACEHOLDER: Legal Entity Name, Registration Number, Registered Address, e.g., MVG Systems Pty Ltd / Inc.]

02.Information We Collect

We collect information to deliver deterministic capacity auditing, True Hourly Cost (THC) calculations, and exit readiness analytics:

Authentication Credentials: Email addresses, user display names, and OAuth tokens provided via Google Sign-In or Firebase Authentication.
Agency Operational Inputs: Non-billable overhead categories, anonymized or internal project identifiers, developer capacity hours, target blended rates, and staffing configurations.
Technical & Telemetry Data: IP addresses, browser user agent strings, access timestamps, and session security tokens required to enforce role-based access control (RBAC).

[PLACEHOLDER: Add specific data fields required by your agency agreements or remove fields not currently tracked.]

03.Tenant Isolation & Data Security Architecture

The Margin Console operates on a strict multi-tenant boundary model. All client portfolio financial metrics, project rosters, and overhead figures are partitioned by deterministic tenantId rules at the database engine level (Google Cloud Firestore):

No tenant can query, aggregate, or infer data belonging to another tenant account.
All communications occur over TLS 1.3 encryption in transit.
Data at rest is encrypted utilizing Google Cloud AES-256 cryptographic standards.
Super Admin impersonation sessions are logged and restricted to authorized diagnostic protocols.

04.Background IP vs. Work Product Confidentiality

MVG Systems retains all proprietary rights in the calculation logic, deterministic models, and Background IP of The Margin Console. Conversely, all proprietary financial data, team compensation figures, and client project information inputted by your agency remain exclusively your property and confidential. MVG does not sell, trade, or train public AI models on your private agency financial structures.

05.Third-Party Subprocessors

We rely on trusted enterprise infrastructure providers to operate the Service:

Subprocessor	Purpose	Location
Google Cloud / Firebase	Database, Authentication, Cloud Hosting	Global / Singapore / US
Hostinger	Corporate Email Routing (support@mvg.systems)	Singapore / EU

06.Data Retention & Erasure Rights

You retain the right to request a complete export of your agency's data or the permanent deletion of your tenant partition upon termination of your subscription. Requests are processed within thirty (30) business days.

[PLACEHOLDER: Custom data retention window, e.g., 90-day archive following account termination before hard wipe.]

07.Contact & Data Protection Officer

For any privacy inquiries, GDPR data requests, or compliance audits, contact our security and legal operations team:

support@mvg.systems