GRC Copilot Pro
Back to App

Privacy Policy

Last updated: 16 September 2026

At GRC Copilot Pro, we take your privacy and the security of your corporate data seriously. This Privacy Policy describes how we collect, use, and protect your information when you use our IT Governance, Risk, and Compliance SaaS platform.

1. Zero-Retention AI Processing

The core feature of GRC Copilot Pro involves analyzing uploaded corporate policies, vendor contracts, and risk registers using Artificial Intelligence. We employ a strict Zero-Retention AI Architecture:

  • In-Memory Processing: Uploaded documents are processed entirely in-memory.
  • Instant Destruction: Once the AI analysis or policy generation is complete and the results are returned to your dashboard, the source documents are immediately purged from our servers.
  • No Training on Customer Data: We guarantee that your proprietary data, policies, and text prompts are never saved to disk, cached, or used to train public or private AI models (including those from our third-party LLM providers).

2. Information We Collect

We only collect the information absolutely necessary to provide and secure our service:

  • Account Information: Name, email address, and company name when you register.
  • Billing Information: Processed securely by our payment provider (Stripe). We do not store raw credit card numbers.
  • Application Data: The metadata, risk scores, and generated gap analyses you explicitly choose to save to your dashboard database.

3. Data Sharing & Third Parties

We do not sell, rent, or lease your personal data. We utilize authorized third-party service providers (sub-processors) to host our application, securely process payments, and provide enterprise-grade AI inference (under strict zero-data-retention B2B agreements).

A full list of our current authorized sub-processors is available to active customers upon request.

4. Your Data Rights

Depending on your location (e.g., GDPR in Europe, CCPA in California), you have the right to access, correct, delete, or export your personal data. You can perform these actions directly within your Account Settings or by contacting our Data Protection Officer at privacy@grccopilot.pro.

5. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: legal@grccopilot.pro