Privacy Policy

1. Introduction

PrymoSec ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our security awareness training platform.

2. Information We Collect

Personal Information

We collect information you provide directly to us, including:

• Name and email address when you create an account
• Organization name and details
• Payment information (processed securely by Stripe)
• Training progress and quiz scores

Automatically Collected Information

When you use our service, we automatically collect:

• Log data (IP address, browser type, pages visited)
• Device information
• Usage patterns and analytics

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send you technical notices and support messages
• Track training progress and generate certificates
• Respond to your comments and questions
• Analyze usage to improve our platform

4. Information Sharing

We do not sell your personal information. We may share information with:

• Service providers who assist in our operations (e.g., Stripe for payments, Supabase for data storage)
• Your organization administrators (for employee training data)
• Law enforcement when required by law

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Regular security assessments
• Access controls and authentication
• Multi-tenant data isolation

6. Data Retention

We retain your information for as long as your account is active or as needed to provide you services. You may request deletion of your data by contacting us.

7. Your Rights

Depending on your location, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to processing of your data
• Data portability

8. Cookies

We use essential cookies to maintain your session and preferences. We may use analytics cookies to understand how you use our service.

9. Children's Privacy

Our service is not intended for children under 16. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us.