ISMS CopilotPrivacy Policy
How we collect, use, and protect your personal data.
Data controller
ISMS Copilot (operated by the company behind ismscopilot.com) is the data controller for personal data collected through this website and our application.
Data we collect
We collect data you provide directly (account registration, contact forms), data collected automatically (cookieless, aggregate page-view statistics via Vercel Web Analytics, application error reports via Sentry, and cookies), and data from third parties (payment processors). We process this data to provide our services, improve our product, and communicate with you.
Your rights
Under GDPR, you have the right to access, rectify, erase, restrict processing, data portability, and object to processing of your personal data. To exercise these rights, contact us at privacy@ismscopilot.com.
Data retention
We retain your personal data only as long as necessary for the purposes described in this policy, or as required by law. Account data is deleted within 30 days of account deletion request.
International transfers
Your account data and files are stored in the EU (Frankfurt). Some data is transferred outside the EEA, including to our US providers for AI routing (when Advanced Data Protection is off) and for email; these transfers are covered by Standard Contractual Clauses.
Ready to do compliance work faster?
Built for speed, accuracy, and audit-ready output.