ISMS Copilot
Legal

Privacy Policy

How we collect, use, and protect your personal data.

Data Controller

ISMS Copilot (operated by the company behind ismscopilot.com) is the data controller for personal data collected through this website and our application.

Data We Collect

We collect data you provide directly (account registration, contact forms), data collected automatically (usage analytics via PostHog, cookies), and data from third parties (payment processors). We process this data to provide our services, improve our product, and communicate with you.

Your Rights

Under GDPR, you have the right to access, rectify, erase, restrict processing, data portability, and object to processing of your personal data. To exercise these rights, contact us at privacy@ismscopilot.com.

Data Retention

We retain your personal data only as long as necessary for the purposes described in this policy, or as required by law. Account data is deleted within 30 days of account deletion request.

International Transfers

Data may be transferred outside the EEA. We ensure appropriate safeguards are in place, including Standard Contractual Clauses, for any international transfers.

Ready to streamline your compliance work?

Try the latest version built for speed and accuracy, or access the classic experience.