Privacy Policy

Last updated: July 20, 2025

1. Information We Collect

We collect only the information necessary to provide you with our services and maintain our waiting list:

• Email Address: To send you updates about our product launch and provide access to our free ISO compliance guide
• Company Name: To personalize our communications and understand our user base
• Usage Data: Basic analytics to improve our website and services

2. How We Use Your Information & Legal Basis

We use your information strictly for the following purposes and under the following legal bases:

• Send you the free ISO compliance guide (Consent)
• Notify you when ComplyFlow launches (Consent)
• Provide customer support and respond to inquiries (Contract/Legitimate Interest)
• Improve our website and services (Legitimate Interest)
• Comply with legal obligations (Legal Obligation)

3. Data Protection & Security

We implement strict security measures to protect your personal information:

• All data is encrypted in transit and at rest
• We use industry-standard security protocols
• Access to your data is strictly limited to authorized personnel
• Regular security audits and updates

4. Data Sharing & Third Parties

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following limited circumstances:

• With your explicit consent
• To comply with legal requirements or court orders
• To protect our rights, property, or safety
• With trusted service providers who assist us in operating our website (under strict confidentiality agreements)

5. Your Rights & Choices

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Opt-out: Unsubscribe from our communications at any time
• Portability: Request transfer of your data to another service

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. You may request deletion of your data at any time.

7. Cookies & Tracking

We use essential cookies to improve your experience on our website. We do not use tracking cookies or third-party analytics that compromise your privacy. You can control cookie settings through your browser preferences.

8. International Data Transfers & Hosting

Your data is stored and processed in secure facilities located in the United States. For users in the EU/EEA, we ensure adequate safeguards for international data transfers in accordance with GDPR requirements.

9. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

11. Contact Us & Data Protection Officer

If you have any questions about this privacy policy, our data practices, or wish to contact our Data Protection Officer (DPO), please contact us:

12. How to Exercise Your Rights

To exercise your rights to access, correct, delete, or port your data, or to opt-out of sale/sharing, please use our Privacy & Data Rights Request Form. We will respond within 30 days as required by law.