Compliance

This Privacy Policy explains how SecretSource Solutions ("SecretSource", "we", "us", "our") collects, uses, shares, and protects personal data when you use our websites, platform, and services (the "Service")

Last updated: [2025-10-14]

1. Personal data we collect directly from you, is only for early-bird sign-ups

- Account and contact data: name, business email, phone, employer, role, login credentials

2. Personal data we do not collect

- Billing data
- Usage data
- Connected-source metadata
- Cookies and similar tech
- Data automatically from your device/browser
- Data from third-party services
- Data from service providers and partners

3. How we use personal data

- Provide and operate the Service, including authentication, and customer support
- Improve the Service and develop new features
- Communicate about service updates
- Send marketing communications where permitted; you may opt out at any time
- Comply with legal obligations and enforce our Terms

4. How we share personal data

- We do not sell personal data. We do not share it

5. Customer Data we process on your behalf

- None

6. DPA details

- DPA link: [Not Applicable]
- Regional addenda (EU/UK/CCPA/etc.): [Not Applicable]

7. International data transfers: [Not Applicable]

8. Data Retention

- We keep personal data as long as needed to provide the Service, comply with law, resolve disputes, and enforce agreements, then delete or anonymise it

Typical retention:
- Account and contract records: 3 YEARS after account closure
- Billing/tax records: 10 YEARS as required by law
- Support tickets: 12 MONTHS
- Marketing data: until you opt-out or after 5 YEARS
- Customer Data: per your instructions and including 30-DAY post-termination export window and then deletion per policy

9. Security

- We use administrative, technical, and organisational safeguards to protect data, including encryption in transit and at rest where applicable, access controls, logging, and regular reviews
- Certifications/attestations: [NOT APPLICABLE]
- For more, see our Security page

10. Your privacy choices

- To access, update, correct, delete your data: contact us
- Marketing preferences: Unsubscribe via email link or by contacting us
- Cookies: [NOT APPLICABLE]
- Integrations: [NOT APPLICABLE]

11. Cookies and similar technologies

- See our Cookies page

12. Children's privacy

- The Service is not intended for children under AGE 16. We do not knowingly collect data from children. If you believe a child has provided personal data, contact us to delete it

13. Third-party sites and services

- The Service may link to third-party sites or services. Their privacy practices are governed by their own policies. Review them before connecting or using

14. Changes to this Privacy Policy

- We may update this Policy. If we make material changes, we'll notify you via EMAIL and indicate the "Last updated" date. Continued use after the effective date means you accept the changes

15. Region-specific disclosures

- EEA/UK: [NOT APPLICABLE]
- California (CCPA/CPRA): [NOT APPLICABLE]
- Other regions: [NOT APPLICABLE]

16. Contact

- See our Contact page