Privacy Policy

Effective date: July 24, 2026

1. Who we are

SolveGRC ("SolveGRC", "we", "us") provides a governance, risk, and compliance platform. This policy explains how we handle personal information when you visit our website, use our platform, or communicate with us. Questions can be sent to privacy@solvegrc.com.

2. Information we collect

We collect information you provide directly, such as your name, work email, company, and the contents of messages you send us. When you use the platform, we process account information, workspace configuration, and content you or your integrations submit.

• Contact details you submit through forms or during sales conversations
• Account and billing information for customers
• Platform content, including policies, controls, and evidence you choose to store
• Usage data such as pages viewed, features used, and device and browser information
• Cookies and similar technologies as described below

3. How we use information

We use personal information to provide and improve the platform, respond to requests, process transactions, send service communications, provide support, maintain security, and comply with legal obligations. Where required, we rely on consent, contract performance, or legitimate interests as our lawful basis.

4. Customer content

Content submitted to the platform by customers, including evidence collected through integrations, is processed on the customer's behalf under our agreement with that customer. We do not sell customer content or use it for advertising. Customers control retention and deletion of their content.

5. Sharing

We share personal information only with service providers who support our operations under confidentiality obligations, with professional advisers, in connection with a corporate transaction, or when required by law. A current list of subprocessors is available on request. We do not sell personal information.

6. Cookies and analytics

Our website uses essential cookies to function and limited analytics to understand aggregate usage. You can control cookies through your browser settings. We honor applicable opt out preference signals where required by law.

7. Security

We protect personal information with technical and organizational measures including encryption in transit and at rest, access controls, monitoring, and independent testing. Details are published on our Trust Center page.

8. Retention

We retain personal information for as long as needed to provide services, comply with legal obligations, resolve disputes, and enforce agreements. Customer content is retained according to customer configuration and deleted verifiably on offboarding.

9. Your rights

Depending on your location, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise rights, contact privacy@solvegrc.com. You may also lodge a complaint with your local supervisory authority.

10. International transfers

Where personal information is transferred internationally, we use appropriate safeguards such as standard contractual clauses and regional hosting options.

11. Children

Our services are not directed to individuals under 16, and we do not knowingly collect personal information from children.

12. Changes

We may update this policy from time to time. Material changes will be announced on this page with an updated effective date.

13. Contact

SolveGRC, privacy@solvegrc.com. We respond to privacy inquiries within one business day.