Privacy Policy

1. Introduction

ComplaKit ("ComplaKit", "we", "us", or "our") provides this Quick Assessment tool to help organizations gauge their compliance readiness against frameworks such as SOC 2, ISO 27001, GDPR, and the EU AI Act. This Privacy Policy explains what information we collect when you use the tool, how we use it, and the choices you have.

2. Information We Collect

When you take a quick assessment, we collect the answers you provide to the questionnaire, the frameworks you select, and, if you choose to view your full results, your name, work email address, and company name.

We also automatically collect limited technical information, such as your browser type, device type, and referring campaign link, to keep the assessment session working correctly and to understand which campaigns drive traffic.

• Assessment responses and selected frameworks
• Contact details you submit (name, email, company)
• Session and campaign-token identifiers
• Basic technical/browser metadata

3. How We Use Your Information

We use the information you provide to calculate your compliance readiness score, generate your results and recommendations, and, where you have shared contact details, to follow up with relevant guidance or a proposal from our presales team.

• Generating your assessment score and maturity report
• Contacting you about your results if you provide an email address
• Improving the accuracy and relevance of our questions
• Measuring which campaigns and channels are effective

4. Cookies and Local Storage

The assessment tool stores your in-progress answers in your browser's local storage so you can resume where you left off. See our Cookie Policy for details on the cookies and similar technologies we use.

5. How We Share Information

We do not sell your personal information. We may share information with service providers who help us operate the platform (such as hosting and email-delivery providers), each bound by confidentiality and data-processing obligations, or where required by law.

6. Data Retention

We retain assessment sessions and associated contact details for as long as reasonably necessary to respond to your inquiry and for legitimate business record-keeping, after which they are deleted or anonymized.

7. Your Rights

Depending on your location, you may have the right to access, correct, export, or delete the personal information we hold about you, and to object to or restrict certain processing. To exercise these rights, contact us using the details below.

8. Security

We use industry-standard technical and organizational measures, including encryption in transit, to protect the information you submit. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children’s Privacy

This tool is intended for business use and is not directed at individuals under the age of 16. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will revise the "Last updated" date above whenever we make changes, and material changes will be communicated where appropriate.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at privacy@complakit.com.