Privacy Policy
Your privacy and data security are fundamental to our executive intelligence platform.
Last Updated: March 15, 2024
Introduction
MechTu Insights ("we," "our," or "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our executive risk intelligence platform and related services.
This policy applies to all users of our platform, including executive leaders, authorized personnel, and visitors to our website.
Information We Collect
Personal Information
We collect personal information that you provide directly to us, including:
- Contact information (name, email address, phone number, business address)
- Professional information (job title, company name, department)
- Account credentials and authentication information
- Communication preferences and settings
- Payment and billing information for subscription services
- Support and customer service interactions
- Training and certification records
- Event attendance and participation data
- Survey responses and feedback submissions
- Marketing communication preferences
- Emergency contact information for enterprise accounts
Business Data
Through our platform, we process operational, financial, and vendor data that you upload or integrate, including:
- Operational metrics and performance data
- Financial information and budget data
- Vendor and supplier information
- Risk assessment and scenario planning data
- Project management and resource allocation data
- Compliance and audit trail information
- Historical performance benchmarks
- Strategic planning documents and forecasts
- Organizational structure and reporting hierarchies
- Third-party integration data and API connections
Technical Information
We automatically collect certain technical information, including:
- Device information (IP address, browser type, operating system)
- Usage data (pages visited, features used, time spent)
- Log files and system performance data
- Cookies and similar tracking technologies
- Network connection details and bandwidth usage
- Security event logs and access patterns
- Error reports and diagnostic information
- Geographic location data (country and region level)
- Session duration and interaction patterns
- Feature adoption and usage analytics
- Mobile device identifiers and app usage data
- Integration performance and API usage metrics
How We Use Your Information
We use the collected information for the following purposes:
- Platform Services: To provide, maintain, and improve our executive risk intelligence platform
- Risk Analytics: To generate insights, predictions, and recommendations based on your data
- Account Management: To manage your account, authenticate users, and provide customer support
- Communication: To send important updates, security alerts, and service notifications
- Security: To protect against fraud, unauthorized access, and security threats
- Compliance: To comply with legal obligations and regulatory requirements
- Improvement: To analyze usage patterns and improve our services
- Customization: To personalize your platform experience and recommendations
- Training: To provide user training and certification programs
- Research: To conduct anonymized research for product development
- Integration: To facilitate third-party integrations and data synchronization
Data Security
We implement industry-leading security measures to protect your information:
- Encryption: All data is encrypted in transit and at rest using AES-256 encryption
- Access Controls: Strict role-based access controls and multi-factor authentication
- Infrastructure: SOC 2 Type II compliant infrastructure with regular security audits
- Monitoring: 24/7 security monitoring and incident response procedures
- Data Centers: Secure, certified data centers with physical and environmental controls
- Network Security: Advanced firewalls and intrusion detection systems
- Vulnerability Management: Regular security assessments and penetration testing
- Employee Training: Comprehensive security awareness training for all staff
- Data Backup: Encrypted, geographically distributed backup systems
- Incident Response: Documented incident response procedures and notification protocols
Information Sharing and Disclosure
We do not sell, trade, or rent your personal information. We may share information only in the following circumstances:
- Service Providers: With trusted third-party service providers who assist in platform operations
- Legal Requirements: When required by law, court order, or government regulation
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- Consent: With your explicit consent for specific purposes
- Protection: To protect our rights, property, or safety, or that of our users
- Emergency Situations: To prevent imminent harm to persons or property
- Professional Advisors: With lawyers, accountants, and other professional advisors
- Regulatory Authorities: With financial and industry regulators as required
- Parent Companies: With our parent company or subsidiaries for business operations
Data Retention
We retain your information for as long as necessary to provide our services and comply with legal obligations:
- Account Data: Retained while your account is active and for 7 years after termination
- Business Data: Retained according to your data retention settings and legal requirements
- Log Data: Typically retained for 12 months for security and operational purposes
- Backup Data: May be retained in encrypted backups for up to 3 years
- Financial Records: Retained for 7 years to comply with accounting standards
- Communication Records: Support communications retained for 3 years
- Security Logs: Security-related logs retained for 2 years minimum
- Compliance Data: Retained as required by applicable regulations
- Marketing Data: Retained until you opt-out or for 5 years maximum
- Analytics Data: Aggregated analytics data retained indefinitely
Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request access to your personal information
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information
- Portability: Request a copy of your data in a portable format
- Restriction: Request restriction of processing in certain circumstances
- Objection: Object to processing based on legitimate interests
- Withdrawal: Withdraw consent for processing where applicable
- Complaint: File complaints with relevant data protection authorities
- Opt-out: Opt-out of marketing communications at any time
- Data Minimization: Request limitation of data collection to necessary purposes
- Automated Decision-Making: Object to automated decision-making processes
To exercise these rights, please contact us using the information provided below.
Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
Privacy Officer
Email: privacy@mechtuinsights.com
Phone: +1 408 372 9460
Address: MechTu Insights
1830 Heatherdale Ave
San Jose, CA 95126, USA