Resiliency Consulting Services Inc./LLC ("we," "us," "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the GRATE-IC platform service ("Service").
1. Information We Collect
1.1 Account Information
- Name, email address, company name
- Account credentials (encrypted)
- Billing information (processed by third-party payment processor)
1.2 Usage Data
- IP addresses, browser type, device information
- Pages visited, features used, time spent
- Framework processes accessed
- Documents created and downloaded
1.3 Your Content
- Data you input into the platform
- Documents you create
- Project information
- Custom configurations
2. How We Use Your Information
We use collected information to:
- Provide and maintain the Service
- Process transactions and send notices
- Improve and personalize the Service
- Analyze usage patterns and trends
- Detect and prevent fraud or abuse
- Comply with legal obligations
3. How We Share Your Information
We do NOT sell your personal information.
We may share information with:
- Service Providers: Payment processors, hosting providers (Microsoft Azure)
- Legal Requirements: When required by law or legal process
- Business Transfers: In case of merger, acquisition, or sale
- With Consent: When you explicitly authorize sharing
4. Data Security
We implement industry-standard security measures:
- Encryption in transit (TLS/SSL)
- Encryption at rest (Azure encryption)
- Access controls and authentication
- Regular security audits
- Intrusion detection
- Activity logging and monitoring
5. Data Retention
We retain your data:
- While your account is active
- As required for legal/regulatory compliance
- For 90 days after account termination (unless longer required by law)
- Anonymized usage data indefinitely for analytics
6. Your Rights
Depending on your location, you may have rights to:
- Access your personal information
- Correct inaccurate information
- Request deletion of your information
- Object to processing
- Request data portability
- Withdraw consent
7. International Data Transfers
Your data may be transferred to and processed in Canada, United States, or other countries where our service providers operate. We ensure adequate protections for international transfers through appropriate safeguards.
8. Children's Privacy
Our Service is not directed to children under 13 (or 16 in EU). We do not knowingly collect personal information from children.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and/or sending an email. Changes are effective 30 days after notice is provided.
10. Contact Us
Privacy Officer
Email: privacy@grateic.com
Website: www.grateic.com