Privacy Policy

1. Information We Collect

We collect information you provide directly to us: your name, email address, company name, industry, country, and the business metrics you submit for risk analysis. We also collect usage data including report generation history, monitoring configurations, and API call logs. If you enable two-factor authentication, we store the necessary cryptographic secrets.

2. How We Use Information

Your data is used to generate risk analyses, provide monitoring services, send alerts and digests you have requested, process payments, and improve the Service. Anonymized, aggregated data contributes to sector benchmarks and the Standwick Market Index. No individual business data is ever exposed in these public resources. We do not sell, rent, or trade your personal or business data to third parties.

3. Data Sharing and Disclosure

We do not share your personal or business data with third parties except in the following limited circumstances: (a) with your explicit consent, such as when you choose to make a report publicly shareable; (b) with service providers who process data on our behalf, such as Stripe for payment processing and our email provider for communications; (c) when required by law or to protect our rights. Service providers are contractually bound to use your data only for the specific purpose we engage them.

4. Public Reports and Shared Content

When you choose to share a report publicly, only non-sensitive output data is displayed: the risk domain, severity score, trend direction, primary signal, root cause hypothesis, impact estimate, fix recommendation, and scenario projections. Raw input metrics, context notes, company name, and personally identifiable information are never included in public reports. Your company name is only displayed if you explicitly opt in via the form toggle.

5. Data Storage and Security

Your data is stored on secure servers and transmitted using industry-standard encryption. We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. This includes SSL/TLS encryption, hashed passwords, CSRF protection, and rate limiting on authentication endpoints. We retain your data for as long as your account is active. You may request deletion of your data at any time.

6. Cookies and Tracking

We use only essential cookies required for authentication and session management. We do not use tracking cookies, advertising cookies, or third-party analytics services (except Google Analytics). No personal data is collected through cookies beyond what is necessary for the Service to function.

7. Third-Party Services

We use Stripe for payment processing. Stripe receives your payment information and processes transactions on our behalf. Stripe does not receive your risk analysis data or monitoring configurations. Email communications are delivered through our configured SMTP provider. We encourage you to review Stripe's privacy policy for information on how they handle your payment data.

8. Your Rights

You have the right to access, correct, or delete your personal data at any time. You may export your report history from your dashboard. You may request a complete copy of all data we hold about you. To exercise any of these rights, contact us through the Contact page. We will respond within 30 days.

9. Data Retention

We retain your account data and reports for as long as your account is active. Upon account deletion, your personal information is removed. Anonymized data that has been aggregated into benchmarks and the Market Index cannot be extracted or deleted, as it no longer contains identifiable information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or through the Service. The date of the latest revision is displayed at the top of this page. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

For privacy-related inquiries, please contact us.