Privacy notice

Information we process

We process account and identity details, organization membership, product ideas, feedback, uploaded evidence, activity records, billing references, support messages, and integration configuration. We also receive technical data such as device, browser, security and service-usage logs.

Why we use it

• To create and secure accounts, workspaces, invitations and sessions.
• To provide scoring, evidence organization, integrations, delivery workflows and support requested by an organization.
• To administer subscriptions, prevent abuse, maintain audit trails, and improve reliability.
• To meet legal, accounting and security obligations.

Processors and sharing

We use infrastructure, database, email, authentication, payment, AI and integration providers to operate requested features. We do not sell workspace content. Organization administrators control much of the content submitted to a workspace and may access or remove it.

Retention and rights

We retain information while an account or organization needs the service, then delete or anonymize it according to our retention schedule, subject to backups, legal holds and security records. Depending on location, you may have rights to access, correct, delete, restrict or export personal information and to object to certain processing. Contact us through Contact; we may need to verify the request.

International transfers and security

Service providers may process information in countries outside your own. We use contractual and technical safeguards appropriate to the processing. No internet service can promise absolute security; report suspected security or privacy issues promptly.