Privacy Policy

GRC Armor ("we," "us," or "our") operates the grcarmor.com website and the GRC Armor compliance automation platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our Service.

By accessing or using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

Account information: Name, work email address, company name, job title, and authentication credentials when you register or are invited to the platform.

Compliance data: Information you upload or generate within the Service, including policies, evidence files, control assessments, risk registers, vendor records, and audit-related materials.

Usage data: Log data, IP address, browser type, device information, pages visited, and actions taken within the Service.

Communications: Messages you send us via contact forms, support requests, or email correspondence.

We use collected information to:

• Provide, operate, and maintain the Service
• Authenticate users and enforce access controls
• Process compliance workflows and generate reports
• Send transactional emails, security alerts, and product updates
• Respond to inquiries and provide customer support
• Improve the Service, fix bugs, and develop new features
• Comply with legal obligations and enforce our Terms of Service

Your data is stored on secure servers with encryption in transit (TLS 1.2+) and at rest. We implement role-based access controls, multi-tenant data isolation, audit logging, and regular security assessments consistent with industry best practices.

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

We may use third-party providers for hosting, email delivery, analytics, and payment processing. These providers access data only to perform services on our behalf and are contractually obligated to protect it.

The Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites.

If you are located in the European Economic Area, you have the right to access, rectify, erase, restrict processing of, and port your personal data. You may also object to processing and withdraw consent where applicable.

To exercise these rights, contact us at info@grcarmor.com. You also have the right to lodge a complaint with your local data protection authority.

We use essential cookies to maintain your session and authentication state. We may use analytics cookies to understand how visitors interact with our marketing website. You can control cookie preferences through your browser settings.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance.

For questions about this Privacy Policy, contact us at info@grcarmor.com or via our contact page.