Privacy Policy

We collect information you provide directly to us, such as when you create an account, request a demo, fill in a contact form, or communicate with us via email. This may include:

• Name and job title
• Business email address and phone number
• Company name and size
• Information about your compliance requirements or security posture
• Any other information you choose to provide

We also collect certain information automatically when you use our website, including IP address, browser type, pages visited, and referring URLs. This is collected via standard web server logs and, where applicable, analytics tools. We do not use fingerprinting or invasive tracking technologies.

We use the information we collect to:

• Provide, operate, and improve our platform and services
• Respond to your inquiries and deliver customer support
• Send you technical notices, updates, and administrative messages
• Send marketing communications where you have consented or where permitted by law
• Analyse usage trends to improve the product experience
• Comply with legal obligations and enforce our agreements

We do not sell, rent, or share your personal information with third parties for their own marketing purposes. We may share data with trusted service providers who assist us in operating our platform, subject to appropriate confidentiality and data processing agreements.

Where applicable under data protection law (including the UK GDPR and EU GDPR), we process your personal data on the following legal bases:

• Contract performance — to fulfil your access to our platform and services.
• Legitimate interests — to improve our products, conduct analytics, and communicate relevant updates.
• Consent — for marketing communications and non-essential cookies, where required.
• Legal obligation — where we are required to process data to comply with applicable law.

We retain personal data for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required or permitted by law. When data is no longer needed, we securely delete or anonymise it.

For platform customers, your data is retained for the duration of your subscription and for a reasonable period thereafter to allow for dispute resolution, unless you request deletion earlier. Account information associated with a closed account is typically purged within 90 days of account closure.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These include encryption in transit and at rest, access controls, and regular security assessments aligned with ISO 27001 principles.

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security and encourage you to use strong, unique passwords and to report any suspected security incidents to us promptly.

Depending on your location, you may have the following rights in relation to your personal data:

• The right to access the personal data we hold about you
• The right to request correction of inaccurate data
• The right to request deletion of your personal data ("right to be forgotten")
• The right to restrict or object to our processing of your data
• The right to data portability
• The right to withdraw consent at any time (where processing is based on consent)
• The right to lodge a complaint with a supervisory authority

To exercise any of these rights, please contact us at [click to reveal email]. We will respond to all requests within 30 days.

We use cookies and similar technologies to operate our website and improve your experience. For full details on the cookies we use and how to manage your preferences, please see our Cookie Policy.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email. Your continued use of our services after any changes constitutes your acceptance of the updated policy.