Privacy Policy

Overview

Clairvoyant Systems provides AI-first governance, risk, and compliance (GRC) software solutions, including CorporateIQ (private sector GRC) and GovernmentIQ (public sector program management). This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our services.

For more information about our products, please visit our CorporateIQand GovernmentIQ pages.

Personal Data We Collect

We collect the following categories of personal data:

• Account Information: Name, email address, company name, job title, and other information you provide when creating an account or requesting a demo.
• Usage Data: Information about how you interact with our services, including features accessed, pages viewed, and time spent.
• Device and Analytics Data: IP address, browser type, device information, and analytics data collected through cookies and similar technologies.
• Support Communications: Information you provide when contacting support, including email content and attachments.

Customer-Uploaded Data: When you use our services, you may upload data containing personal information. We process such data as a data processor on your behalf in accordance with your instructions and our Data Processing Agreement.

How We Use Personal Data

We use personal data to:

• Provide, maintain, and improve our services
• Process transactions and manage accounts
• Send administrative communications and respond to inquiries
• Detect and prevent fraud, abuse, and security threats
• Analyze usage patterns to improve user experience
• Comply with legal obligations and enforce our terms

Legal Bases (EEA/UK)

For users in the European Economic Area (EEA) and United Kingdom, we process personal data based on:

• Contract: To fulfill our contractual obligations in providing services
• Legitimate Interests: To operate our business, improve services, and ensure security
• Consent: For marketing communications and certain analytics (where required)
• Legal Obligation: To comply with applicable laws and regulations

Sharing & Disclosure

We may share personal data with:

• Service Providers and Sub-processors: Third-party vendors who assist in operating our services (e.g., cloud hosting, analytics, customer support). See our Sub-processors page for details.
• Corporate Transactions: In connection with mergers, acquisitions, or asset sales (with notice to affected users).
• Legal Requests: When required by law, court order, or government authority, or to protect our rights and safety.

International Transfers

Personal data may be transferred to and processed in countries outside your jurisdiction. We implement appropriate safeguards, including Standard Contractual Clauses (SCCs) for EEA transfers and the UK International Data Transfer Agreement (UK IDTA) where applicable.

Data Hosting Regions: We maintain data in secure, compliant hosting facilities with appropriate safeguards for international transfers.

Data Retention

We retain personal data for as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type:

• Account data: While account is active and for a reasonable period thereafter
• Usage data: Typically up to 24 months
• Legal/compliance data: As required by applicable law

Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Deletion: Request deletion of your personal data
• Correction: Request correction of inaccurate data
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Request limitation of processing
• Objection: Object to processing based on legitimate interests
• Opt-Out of Sale/Share: California residents can opt-out of the "sale" or "sharing" of personal information (see Cookie Policy andDo Not Sell or Share My Personal Information)

To exercise these rights, contact us at privacy@clairvoyantgrc.com.

Security

We implement organizational and technical measures to protect personal data, including encryption, access controls, and regular security assessments. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Children

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If we learn we have collected such data, we will delete it promptly.

Third-Party Links

Our services may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

Changes to this Notice

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last updated" date, and, where required, by email or in-app notification.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Clairvoyant Systems
Email: privacy@clairvoyantgrc.com