Privacy Notice
How We Use Your Information
This notice explains, in simple words, what information Rivedix Technology Solutions collects when you use the CMA Platform, why we need it, and what choices you have.
We use your information only to run the platform, protect your account, support your work, improve assessment quality, and meet our legal responsibilities. We do not sell your personal information.
Information We Collect
We collect the information you give us while using the platform. This may include your name, email address, phone number if you provide it, company details, assessment answers, uploaded evidence files, comments, generated reports, and support or privacy requests.
We also collect basic security information, such as login activity and device/browser details, so we can keep accounts and files safe.
Why We Use It
We use this information to create and manage your account, let you complete cybersecurity maturity assessments, review evidence, prepare findings and reports, provide support, prevent misuse, and respond to legal or privacy requests.
Some platform features may use AI assistance to help prepare or review findings. These outputs should still be reviewed by a responsible user before they are used for audits, compliance, or business decisions.
Your Rights
You are in control of your personal information. You can use the Privacy Center in your account, or contact us, to make these requests:
- Ask us what personal information we have about you.
- Ask us to correct information that is wrong or incomplete.
- Ask us to delete information when we no longer need it.
- Withdraw your consent where we rely on consent to use your information.
- Nominate another person to make privacy requests for you if you are unable to do so.
- Raise a privacy complaint with us.
Who We Share It With
We share information only when needed to run the platform, such as with cloud hosting, email delivery, file storage, analytics, or AI service providers used by the platform. These providers are expected to protect the information they handle for us.
How Long We Keep It
We keep information only for as long as it is needed for the platform, security, support, legal, or compliance reasons. When information is no longer needed, we delete it or anonymize it where practical.
If you request account deletion, your account enters a 30-day grace period during which it is suspended but can be restored by logging back in. After 30 days, your account and all associated data are permanently and irreversibly destroyed.
How We Protect It
We use access controls, secure login sessions, audit records, restricted file access, and monitoring to help protect your information from unauthorized access, loss, misuse, or changes.
Contact
For privacy requests or complaints, contact us at privacy@rivedix.com.
Grievance Officer: Santosh Kamane, Rivedix Technology Solutions, BG Shirke Rd, Jahangir Nagar, Mundhwa Industrial Area, Pune, Maharashtra 411036.