Privacy Policy

Last Updated: January 26, 2025

1. Introduction

MeasuredRisk, Inc. ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

By using MeasuredRisk, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

Account Information

  • Name, email address, and contact information
  • Company name and job title
  • Billing and payment information
  • Account credentials (passwords are hashed and never stored in plain text)

Usage Data

  • How you interact with our platform
  • Features you use and actions you take
  • Log data (IP address, browser type, access times)
  • Device and connection information

Vendor Data

  • Information you upload about your suppliers and vendors
  • Risk assessments and compliance documentation
  • Notes and internal classifications you create

Cookies and Tracking

We use cookies and similar tracking technologies to track activity on our service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

3. How We Use Your Information

  • Provide Services: To deliver, maintain, and improve our platform
  • Communication: To send service updates, security alerts, and support messages
  • Analytics: To understand how users interact with our platform
  • Legal Compliance: To comply with legal obligations and protect our rights
  • Security: To detect, prevent, and address fraud and abuse
  • Marketing: To send promotional communications (with your consent)

4. Data Sharing

Important: We do NOT sell your data

MeasuredRisk will never sell your personal information or vendor data to third parties.

We may share data with:

  • Service Providers: Trusted partners who assist in operating our platform (hosting, analytics, payment processing), all bound by confidentiality agreements
  • Legal Requirements: When required by law, court order, or governmental authority
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • With Your Consent: When you explicitly authorize sharing

Vendor Data: We do NOT share the vendor data you upload with any third parties. Your supply chain intelligence remains yours alone.

5. Data Security

We implement industry-standard security measures to protect your data:

  • Hosted on SOC 2 Type II certified infrastructure
  • Encryption at rest using AES-256
  • Encryption in transit using TLS 1.3
  • Regular security audits and penetration testing
  • Role-based access controls (RBAC)
  • Multi-factor authentication (MFA) available
  • 24/7 security monitoring

For more details, see our Security Overview.

6. Your Rights

You have the following rights regarding your personal data:

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your personal data
  • Export: Download your data in a portable format
  • Opt-out: Unsubscribe from marketing communications
  • Restriction: Limit how we process your data

To exercise these rights, contact us at privacy@measuredrisk.com.

7. Data Retention

  • Account Data: Retained for the duration of your subscription plus 30 days after account closure
  • Vendor Data: You control deletion; removed upon your request or account closure
  • Backups: Retained for 90 days for disaster recovery purposes
  • Usage Logs: Anonymized after 12 months

8. International Users

MeasuredRisk is based in the United States. Your data is stored and processed in US-based data centers.

For EU/EEA Users (GDPR)

  • We process data under lawful bases including consent, contract performance, and legitimate interests
  • You have rights to access, rectification, erasure, and data portability
  • You may lodge complaints with your local supervisory authority

Data Transfers

We use Standard Contractual Clauses and other appropriate safeguards for international data transfers where required.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. For significant changes, we will provide additional notice via email.

Your continued use of our services after changes become effective constitutes acceptance of the revised policy.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

MeasuredRisk, Inc.

Privacy Team

Email: privacy@measuredrisk.com