This Privacy Policy explains how Secov ("Secov", "we", "us", or "our") collects, uses, and shares information when you visit our website, interact with us, or otherwise use our services.

1. Who we are and scope

Secov provides a security and compliance automation platform for organizations. This Policy applies when we act as a data controller, for example when:

You visit or interact with our public website or landing pages.
You communicate with our sales, marketing, or support teams.
You register for demos, webinars, or other events hosted by Secov.

When we process customer data inside the Secov platform on behalf of our customers, we act as a data processor. That processing is governed by a separate agreement between Secov and the customer (such as a Master Subscription Agreement and Data Processing Agreement) and by the customer's own privacy notices.

2. Information we collect

We may collect and process the following categories of information:

Account and contact information, such as your name, work email address, company name, job title, phone number, and any details you choose to provide when you request a demo, contact us, or subscribe to our communications.
Usage and device information, such as IP address, browser type and settings, device type and operating system, referring URLs, pages viewed, links clicked, time spent on pages, and similar technical information collected through server logs and similar technologies.
Communications and support information, such as the content of messages you send to us (for example, support requests, feedback, or survey responses), and associated metadata (such as the time and date of your communications).
Billing and transactional information, if you become a paying customer, such as subscription tier, purchase history, invoicing details, and limited payment-related information handled through our payment and billing providers.
Event and marketing information, such as your registration details, attendance, and preferences when you sign up for Secov events, webinars, or marketing programs.

3. How we use information

We use the information described above for the following purposes:

To provide and operate our services, including operating our website, delivering requested content, and responding to your inquiries and support requests.
To communicate with you, including sending administrative messages, service-related notifications, and information you request.
To improve and develop our services, including analyzing how visitors use our website so we can improve performance, content, and user experience, and develop new features and offerings.
To personalize your experience, such as tailoring certain content based on your interactions with our website or communications.
For marketing and outreach, such as sending you information about Secov products, features, or events that we believe may be of interest to you, in accordance with applicable law. You can opt out of marketing communications at any time.
For security and abuse prevention, including detecting and preventing fraud, abuse, or security incidents, and protecting the rights, property, and safety of Secov, our customers, and others.
For legal and compliance purposes, including complying with legal obligations, resolving disputes, and enforcing our agreements.

4. Legal bases for processing (EEA/UK users)

If you are located in the European Economic Area, the United Kingdom, or a jurisdiction with similar requirements, we rely on the following legal bases to process your personal information:

Performance of a contract, for example when we provide you with services you requested or respond to your inquiries.
Legitimate interests, such as operating and improving our website and services, communicating with you about Secov, and maintaining the security of our systems, provided that our interests are not outweighed by your data-protection rights.
Consent, where required by law, for example for certain marketing communications or the use of certain cookies and similar technologies.
Legal obligations, when we process information to comply with applicable laws and regulations.

We do not sell your personal information. We may share information as follows:

Service providers that perform services on our behalf, such as cloud hosting, analytics, email delivery, customer relationship management, and customer support. These providers may only use the information as instructed by Secov.
Professional advisors, such as lawyers, auditors, and consultants, where necessary for the services they provide to us.
Legal, regulatory, and safety purposes, where we believe disclosure is necessary to comply with applicable law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Secov, our customers, or others.
Business transfers, in connection with a merger, acquisition, financing, reorganization, or sale of all or part of our business, in which case your information may be transferred as part of the transaction.
With your consent, when you direct us to share information or otherwise consent to a specific disclosure.

6. International transfers

Secov may process and store information in countries other than the one in which it was collected. Where we transfer personal information across borders, we take steps designed to ensure an appropriate level of protection in accordance with applicable data protection laws, which may include using standard contractual clauses or similar safeguards.

7. Data retention

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Policy, including providing our services, complying with our legal obligations, resolving disputes, and enforcing our agreements. We may retain aggregated or de-identified information for longer where it does not identify you.

8. Security

We use technical and organizational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, or unauthorized access. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

9. Your rights and choices

Depending on your location and applicable law, you may have certain rights in relation to your personal information, including the right to:

Request access to the personal information we hold about you.
Request correction of inaccurate or incomplete personal information.
Request deletion of your personal information, subject to certain exceptions.
Object to or request restriction of certain processing, including processing based on legitimate interests.
Request the portability of your personal information in a structured, commonly used, and machine-readable format, where technically feasible.
Withdraw consent where we rely on consent to process your information, without affecting the lawfulness of processing before withdrawal.

To exercise these rights, or to update your contact details or communication preferences, please contact us using the details below. We may need to verify your identity before responding to your request.

We will respond within a reasonable timeframe and in accordance with applicable law (typically within 30 days).

If you are located in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority. If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and related laws.

10. Cookies and similar technologies

We may use cookies, pixels, and similar technologies to understand how visitors use our website, to remember your preferences, and to improve performance and content. You can usually configure your browser to reject cookies or notify you when a cookie is set. If you disable cookies, some features of our website may not function properly.

Where we use analytics or similar services, they may set their own cookies or collect similar technical information to help us understand website usage.

11. Subprocessors and data processing terms

When Secov provides its platform to customers as a data processor, we may engage third-party subprocessors to help deliver the services. The list of such subprocessors and the terms governing that processing are described in our customer data protection terms or a separate Data Processing Agreement. Customers may contact us for more information about subprocessors or to request a copy of the applicable data protection terms.

12. Children's privacy

Our website and services are not directed to children under the age of 16, and we do not knowingly collect personal information from children under 16. If you believe that a child has provided us with personal information, please contact us so that we can take appropriate action.

Please do not submit sensitive personal information (such as government identifiers, financial account numbers, or health information) through public forms on our website.

13. Changes to this Policy

We may update this Privacy Policy from time to time. When we make changes, we will revise the "Last updated" date at the top of this page. We encourage you to review this page periodically to stay informed about our privacy practices.

14. Contact us

If you have any questions or concerns about this Privacy Policy or our data practices, you can contact us at:

Email: privacy@secov.com
Website: https://secov.com

Privacy Policy