1. Introduction
Privisy ("we," "our," or "us") operates the website getprivisy.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our compliance audit services.
2. Information We Collect
Information You Provide: When you request a compliance audit, we collect information you voluntarily provide, such as your name, email address, company name, and the website URL you want audited. When you buy a single audit or a subscription, payment details are collected by our payment processor, Stripe, as described in Section 5.
Purchase Information: When you buy a single audit or a subscription, we receive and keep a record of the purchase from Stripe: the order and customer identifiers, which report or plan you bought, your credit balance, and your subscription status and billing period. We do not receive your full card number. Stripe collects payment details as described in Section 5.
Automatically Collected Information: We may collect certain technical information when you visit our website, including IP address, browser type, operating system, and browsing behavior for analytics purposes.
3. How We Use Your Information
We use the information we collect to:
- Provide our compliance audit services
- Communicate with you about your audit results
- Send you product and marketing email about Privisy after you create an account, or ask us to email you a report. Every such email includes an unsubscribe link, and buying an audit or a subscription ends the series
- Improve our website and services
- Comply with legal obligations
4. Information Sharing
We do not sell your personal information. We may share your information with:
- Service providers who assist in delivering our services
- Our payment processor, Stripe, which processes payments on our behalf and also uses some information for its own purposes, as described in Section 5
- Our email provider, Loops, which receives your email address and whether you have bought an audit or a subscription, and sends our product and marketing email on our behalf as a service provider. If you ask us to email you a report, Loops also receives the domain of the audited website and its grade
- Legal authorities when required by law
5. Payments
We use Stripe, Inc. to process payments for single audits and for recurring subscriptions, including subscription billing and management. When you check out, Stripe receives the following categories of personal information:
- Account identifier: the identifier of your Privisy account, so your purchase can be linked to your account.
- Contact information: the email address you enter at checkout.
- Payment card information: the card details you enter at checkout.
- Billing address: if the checkout form asks for it, for example to calculate tax or issue an invoice.
- Device and network information: your IP address and browser or device details, which Stripe uses to prevent fraud.
Stripe collects your card details directly. We do not receive or store your full card number. Stripe processes this information on our behalf to complete and manage your payments. It also uses some of it for its own purposes, such as fraud prevention and legal compliance, as described in the Stripe Privacy Policy.
6. Cookies, Tracking Technologies & Opt-Out Preference Signals
We use cookies and similar tracking technologies for analytics and advertising measurement, including services provided by Google, LinkedIn, and Meta. Some of this activity may constitute "sharing" of personal information for cross-context behavioral advertising under the CCPA/CPRA. We do not sell your personal information for money.
These technologies are enabled by default, and you have the right to opt out of the sale or sharing of your personal information at any time:
- Your Privacy Choices. Use the control at Your Privacy Choices to turn analytics and advertising cookies off. Your choice applies across getprivisy.com and the Privisy scanner application, and we remember it for one year.
- Opt-out preference signals. We process opt-out preference signals, including Global Privacy Control (GPC), automatically and in a frictionless manner. If your browser or extension sends a GPC signal, we treat it as a valid request to opt out of the sale and sharing of your personal information and disable advertising and analytics trackers without any further action from you. A GPC signal always takes precedence over any other setting.
We do not discriminate against you for exercising any of these rights.
7. Data Retention
We keep each category of personal information for the period below, or for as long as the stated criteria apply:
- Account and contact information: your name and email address are kept for as long as you have a Privisy account, and are removed when you delete your account. Deleting your account also deletes your audit reports, as described below.
- Report email requests: if you ask us to email you a report without an account, the email address you give is kept with that report and is deleted when the report is deleted. Our email provider, Loops, also keeps it to send you product and marketing email until you unsubscribe or ask us to delete it. A report requested without an account is kept until it is deleted; there is no automatic deletion window for it today.
- Audit reports: the website URL you asked us to audit and the resulting report are kept until you delete the report or your account. After you delete a report, you can restore it for 30 days; after that it is permanently deleted. Deleting your account deletes all of your reports the same way. A report you have purchased is kept for as long as we keep your purchase information (below), even if you delete it or your account, as the record of what you bought.
- Purchase information: the purchase records we receive from Stripe, your credit balance, and your subscription records are kept for as long as your account is active, so we can honor what you bought, and for 2 years after your account is deleted, as a record of the transaction for accounting and tax purposes.
- Report share-link activity: records of when a report share link you created was opened are kept for 180 days.
- Advertising conversion records: the ad click identifiers and conversion records we use to report scans, sign-ups, and purchases to our advertising partners are kept until they are reported, then for 90 days after the report is sent or finally fails. Click identifiers linked to your account are removed sooner if you opt out of sale or sharing or delete your account.
- Automatically collected information: technical information collected through cookies and similar technologies is kept by the analytics and advertising providers named in Section 6 (Google, LinkedIn, and Meta), under their own retention settings and policies. Your choice made through Your Privacy Choices is remembered for one year.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.
9. Your Rights
Depending on your jurisdiction, you may have the right to:
- Request access to your personal information
- Request deletion of your personal information
- Opt out of the sale or sharing of your personal information
10. Contact Us
If you have questions about this Privacy Policy or want to exercise your privacy rights, please contact us at [email protected].