Privacy Policy

1. Introduction

Complyva ("we", "our", "us") is a compliance management platform. This Privacy Policy explains how we collect, use, and protect your personal data when you use our services at complyva.com.

2. Data We Collect

We collect the following types of data:

Account information: Name, email address, and organisation name provided during registration.

Usage data: Actions performed within the platform (audit trail), login timestamps, and IP addresses for security purposes.

Compliance data: Data you enter into the platform including certifications, risks, audits, incidents, and uploaded evidence files. This data belongs to your organisation.

3. How We Use Your Data

We use your data to:

Provide and maintain the Complyva platform and its features. Authenticate your identity and secure your account with two-factor authentication. Send transactional emails such as login codes, password resets, and invitation notifications. Monitor platform security and prevent unauthorised access.

4. Data Storage and Security

All data is stored on secure infrastructure within the European Union. We use encryption in transit (TLS 1.3), role-based access controls, email-based two-factor authentication, IP rate limiting, and account lockout protections to safeguard your data.

5. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. We may share data with service providers who assist in operating the platform (e.g. email delivery, hosting), but only to the extent necessary to provide our services.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide our services. If you request account deletion, we will remove your personal data and organisation data within 30 days.

7. Your Rights

Under GDPR, you have the right to access, correct, delete, or export your personal data. You also have the right to object to or restrict processing. To exercise any of these rights, contact us at [email protected].

8. Cookies

We use essential cookies only for authentication (session tokens). We do not use tracking cookies, analytics cookies, or advertising cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of any material changes via email or a notice on the platform.

10. Contact

For any questions about this Privacy Policy or your data, contact us at [email protected].