Privacy Policy

    Your privacy is important to us. This policy explains how we collect, use, and protect your data.

    1. Overview

    RedComply AI ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy describes how we collect, use, share, and safeguard your information when you use our RED cybersecurity compliance platform. We comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) for European users and other relevant privacy regulations.

    2. Information We Collect

    privacy.sections.information.intro

    Personal Information

    When you register for our service, we collect:

    • Name and email address
    • Company name and job title
    • Company size and industry
    • Product information and compliance needs
    • Communication preferences

    Technical Information

    We automatically collect:

    • Device information
    • Browser type and version
    • Usage data and analytics
    • Cookies and similar tracking technologies
    • Platform interaction and feature usage

    Compliance Data

    When you use our platform, we process:

    • Product documentation and specifications
    • Risk assessment data
    • Compliance workflow information
    • Generated compliance reports and documentation
    3. How We Use Your Information

    We use your information to:

    • Provide our service: Process compliance data and generate reports
    • Account management: Create and maintain your user account
    • Communication: Send platform updates, compliance alerts, and support
    • Improvement: Analyze usage to enhance our AI algorithms and features
    • Legal compliance: Meet our own regulatory and legal obligations
    • Security: Detect and prevent fraud or unauthorized access

    Legal Basis for Processing (GDPR)

    We process your data based on:

    • Contract performance: To provide our compliance services
    • Legitimate interests: To improve our platform and ensure security
    • Consent: For marketing communications (you can withdraw anytime)
    • Legal obligation: To comply with applicable laws
    4. Data Sharing and Disclosure

    We may share your information with:

    Service Providers

    • Cloud hosting and infrastructure providers
    • Analytics and monitoring services
    • Email and communication platforms
    • Payment processors (for paid services)

    Legal Requirements

    We may disclose information when required by law or to:

    • Comply with legal processes or court orders
    • Protect our rights, property, or safety
    • Investigate potential violations of our terms
    • Cooperate with law enforcement

    We do not sell your personal data to third parties.

    5. Data Security

    We implement comprehensive security measures to protect your data:

    • Encryption: Data in transit and at rest using industry-standard encryption
    • Access controls: Strict authentication and authorization systems
    • Monitoring: Continuous security monitoring and threat detection
    • Regular audits: Security assessments and vulnerability testing
    • Employee training: Regular security awareness training for our team
    • Data centers: Certified secure hosting facilities

    While we use reasonable security measures, no system is 100% secure. We cannot guarantee absolute security but continuously work to improve our protections.

    7. Your Rights

    You have the following rights regarding your personal data:

    • Access: Request a copy of your personal data
    • Rectification: Correct inaccurate or incomplete data
    • Erasure: Request deletion of your data (subject to legal requirements)
    • Portability: Export your data in a machine-readable format
    • Restriction: Limit how we process your data
    • Object: Opt out of certain types of processing
    • Withdraw consent: For processing based on consent

    To exercise these rights, please contact us at privacy@redcomply.ai. We will respond within 30 days (or as required by applicable law).

    10. Children's Privacy

    Our service is designed for business use and is not intended for children under 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

    11. Changes to This Policy

    We may update this Privacy Policy from time to time. We will notify you of significant changes by:

    • Email notification to registered users
    • Platform notification when you log in
    • Posting the updated policy on our website

    Your continued use of our service after changes become effective constitutes acceptance of the updated policy.