At a glance. The public website collects the details you choose to send through its inquiry form and ordinary technical information needed to operate and understand the site. A signed customer agreement and any data-processing addendum may govern additional data handled within a purchased service.
1. Scope of this policy
Policy Resonance is a regulatory compliance software product. This policy describes information handled through this website, product inquiries, and any Policy Resonance service made available to an organization. References to “we” and “us” mean the provider operating Policy Resonance. Where an organization uses the service under a separate agreement, that agreement may assign different responsibilities for customer-controlled data.
2. Information we collect
- Information you provide. A demo or sales inquiry asks for your first and last name, work email, company, and any details you choose to put in your message. You can avoid including sensitive records in an inquiry.
- Service information, if access is provided. Organizations may provide authorized-user details, configuration, regulatory materials, policies, controls, or other customer content under their agreement. The applicable agreement describes how that content is handled.
- Technical information. Our hosting and analytics systems may receive IP address, browser and device information, pages viewed, approximate location derived from IP, timestamps, referring pages, and diagnostic or security logs.
3. How we use information
We use information to respond to inquiries, arrange evaluations, provide and support contracted services, secure and troubleshoot the site, understand site usage, improve the experience, comply with legal obligations, and communicate about a requested business relationship. Where privacy law requires a legal basis, these activities may rely on your request or consent, performance of a contract, legitimate business interests, or compliance with law, as applicable.
We do not use the details in a demo request to make automated legal or compliance decisions about you.
5. Sharing and service providers
We share information only where needed to operate the site and respond to you, with appropriate access controls and contractual arrangements where applicable. Current website providers include:
- Replit for website and API hosting, infrastructure, and site analytics. Its systems may process traffic and technical usage information.
- Resend to deliver inquiry emails containing the information submitted through the form to our designated business recipient.
We may also disclose information when legally required, to protect rights and security, or as part of a business transfer with appropriate safeguards. We do not sell website inquiry information as a product. Additional processors for a contracted service should be described in the relevant customer agreement or data-processing addendum.
6. Data security
We use reasonable technical and organizational measures appropriate to the information and service, including encrypted connections to this website and restricted access to business inquiries. No internet service is completely secure; please do not send confidential regulatory records through the public inquiry form. Security commitments for a paid deployment, if any, are defined in the applicable agreement.
7. Data retention
We keep inquiry information only as long as reasonably needed to respond, manage a business relationship, maintain records, resolve disputes, or meet legal obligations. Hosting, email, and analytics providers may keep operational records under their own schedules. Retention and deletion of customer content within a contracted service are governed by the applicable agreement and any data-processing addendum. We do not publish a fixed retention period that may not reflect those arrangements.
8. Your privacy rights
Depending on your location, you may be entitled to access, correct, delete, receive a copy of, or restrict certain uses of your personal information, or to object to processing and withdraw consent. You may also complain to a relevant supervisory authority. We may ask for reasonable verification before acting on a request and will respond as required by applicable law. For data controlled by your employer or another customer, we may direct you to that organization.
9. International processing
Our providers may process information in jurisdictions other than your own. Where required, we will use an applicable transfer mechanism or contractual safeguards. A customer agreement may specify additional location or processing requirements for service data.
10. Children
Policy Resonance is intended for business users and is not directed to children under 18. If you believe a child has submitted personal information, please contact us so we can review and, where appropriate, delete it.
11. Changes to this policy
We may revise this notice as the site, services, or law changes. The updated version will appear here with a revised date. For material changes affecting existing customer relationships, we will provide notice where required by law or agreement.
12. Contact and requests
For a privacy question or rights request, use the Policy Resonance inquiry form and begin your message with “Privacy request.” If your organization already works with us, you can also use the contact channel identified in its agreement.
This general notice is not legal advice. Have qualified counsel review its fit for your operations and jurisdictions. See also the Terms of Service.