Privacy Policy

What we collect

• Contact messages: your name, email address, and message when you contact us.
• Assessment inputs: the control answers and evidence text you enter into the Krypton GRC app.
• Basic operational data: standard server logs needed to run and secure the service.

How we use it

To operate the service, respond to your inquiries, and improve the product. We do not sell your personal data, and we do not use your assessment inputs to train machine-learning models.

Retention

Contact messages are kept as long as needed to handle your inquiry. Assessment inputs live in your session while you work; anything persisted server-side is kept only to provide the service you've asked for.

Your rights

You can ask for a copy of your data or for it to be deleted at any time by writing to info@kryptongrc.com. We'll respond within 30 days.

Changes

If this policy changes materially, we'll update the effective date above. Continued use of the service after changes means you accept the updated policy.