DRAFT — pending legal review
Privacy Notice
TechForward Security Posture Review (SPR)
What we collect
- Your sign-in details: email address, and your name if your sign-in provider shares it.
- Your profile: name, job title, organization name, organization type, industry and organization size.
- Your review answers and any optional comments you add.
- Your consent choices and when you made them.
- Records of actions in the app (for example, signing in or submitting a review). These contain identifiers only, not your answers.
- Records of emails we send you. These store a one-way hash of your email address, not the address itself.
We never ask for architecture diagrams, IP addresses, hostnames, vulnerability reports, security logs, privileged account details, specific control weaknesses, percentages of coverage or maturity levels. Do not enter CUI or classified information.
Why we use it
- To run your review, save your progress and show you a summary.
- To understand your priorities and follow up about a consultation.
- To send emails you need, such as a submission confirmation.
- If you agree, to send reminders about an unfinished review or about booking a consultation. You can unsubscribe at any time.
- To keep the service secure and to keep a record of important actions.
How long we keep it
| Information | How long |
|---|---|
| Unfinished (draft) reviews | Deleted after 30 days without activity. We email a reminder 7 days before deletion. |
| Submitted reviews and TechForward's internal notes about them | Deleted 12 months after submission, unless you become a client and we agree to keep them. |
| Activity (audit) records | Deleted after 12 months. |
| Email delivery records | Deleted after 12 months. |
| Your request to delete a review | Carried out immediately in the app. |
Who processes it for us
- Base44: hosts the app, stores your data and handles sign-in.
- SendGrid: delivers our emails.
- Calendly: schedules consultations you book.
If you sign in with Google, Google handles that sign-in under its own terms.
How we protect it
Only TechForward staff with an administrator account can see submitted reviews. Access to data in the app is restricted by account role.
[PENDING VERIFICATION] Statement about encryption of stored data.
Your choices and rights
- You can delete any of your reviews from your account page at any time.
- You can turn follow-up emails off at any time using the unsubscribe link in those emails.
- You can ask us what information we hold about you, or ask us to correct or delete it.
Contact
[PENDING: privacy contact address]