Privacy Policy

TailoredGRC, Inc. · Effective and last revised June 18, 2026

1. Introduction

TailoredGRC, Inc. ("TailoredGRC," "we," "us," or "our") respects your privacy. This Privacy Policy describes how we collect, use, disclose, and protect personal information when you visit tailoredgrc.com, use our services, or interact with us. By using our website or services, you acknowledge the practices described in this Privacy Policy.

2. Scope and U.S.-Only Operations

This Privacy Policy applies to personal information collected by TailoredGRC in its capacity as a controller of personal information, including information about visitors to our website, prospective customers, and authorized users of our services. This Privacy Policy does not govern personal information that TailoredGRC processes on behalf of its customers — that data is processed under the terms of the applicable customer agreement and our Data Processing Addendum.

TailoredGRC operates exclusively within the United States. All personal information collected by TailoredGRC is processed and stored within the United States. TailoredGRC does not market its services to, nor does it knowingly collect personal information from, individuals located outside the United States.

3. Information We Collect

3.1 Information You Provide

Account registration information (name, email address, employer, role).
Communication preferences and content of communications with us.
Payment information (processed by our payment subprocessor; we do not store full payment card numbers).
Information you provide when requesting access to documents, demos, or sales conversations.

3.2 Information We Collect Automatically

Website usage information (pages viewed, time on page, referring URL, IP address).
Device and browser information.
Cookies and similar tracking technologies (see Section 6).

3.3 Information from Third Parties

Information from business partners, marketing partners, or publicly available U.S. sources where consistent with applicable law.

4. How We Use Information

We use personal information to provide and improve our services, communicate with you, respond to requests, conduct sales and marketing activities, prevent fraud and abuse, comply with legal obligations, and protect our rights and the rights of others.

5. How We Share Information

5.1 Service Providers

We share personal information with service providers who perform services on our behalf (hosting, customer support, email delivery, and payment processing). All service providers are domiciled in or process data within the United States. Service providers are bound by contractual terms requiring them to protect personal information and to use it only for the purposes for which we share it. A current list of TailoredGRC's subprocessors is available in our Trust Center.

5.2 Legal Requirements

We disclose personal information when required by law, court order, or legal process, or where we believe disclosure is necessary to protect rights, property, or safety.

5.3 Business Transfers

In the event of a merger, acquisition, financing, or sale of assets, personal information may be transferred to the relevant party, subject to the requirements of applicable U.S. law.

5.4 No Sale of Personal Information

TailoredGRC does not sell personal information, and has not sold personal information in the preceding twelve (12) months. TailoredGRC does not share personal information for cross-context behavioral advertising as defined by the California Consumer Privacy Act.

6. Cookies and Tracking

We use cookies and similar technologies to operate the website and remember your preferences. We measure website usage only through our own application logs and do not use third-party analytics or advertising trackers. You may control cookies through your browser settings; disabling certain cookies may affect website functionality.

7. Data Retention

We retain personal information for as long as needed to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting obligations. Retention periods vary by data type and applicable legal requirements.

8. Your Rights

Depending on the U.S. state in which you reside, you may have rights under applicable state privacy laws to:

Access or obtain a copy of personal information we hold about you.
Correct inaccurate personal information.
Request deletion of personal information.
Opt out of the sale or sharing of personal information (note: TailoredGRC does not sell or share personal information as described in Section 5.4).
Limit the use and disclosure of sensitive personal information.
Not be discriminated against for exercising these rights.

To exercise these rights, contact us at privacy@tailoredgrc.com. We will respond within the timeframes required by applicable law.

9. Children's Privacy

Our services are intended for business use and are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13 in violation of the Children's Online Privacy Protection Act (COPPA). If we learn that we have collected personal information from a child under 13, we will delete it.

10. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. These safeguards are described in further detail in the TailoredGRC Trust Center materials. No security measure is perfect; we cannot guarantee absolute security.

11. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA"), including:

Right to Know: the right to know what categories and specific pieces of personal information are collected, sold, or disclosed about you.
Right to Delete: the right to request deletion of personal information.
Right to Correct: the right to request correction of inaccurate personal information.
Right to Opt Out: the right to opt out of the sale or sharing of personal information.
Right to Limit: the right to limit the use and disclosure of sensitive personal information.
Right to Non-Discrimination: the right not to be discriminated against for exercising these rights.

TailoredGRC does not sell personal information and does not share personal information for cross-context behavioral advertising. To exercise CCPA/CPRA rights, contact us at privacy@tailoredgrc.com.

12. Other U.S. State Privacy Rights

Residents of other U.S. states with comprehensive privacy laws (including but not limited to Colorado, Connecticut, Virginia, Utah, Texas, and Oregon, as applicable) have rights under their respective state laws. TailoredGRC honors these rights consistent with applicable law. To exercise these rights, contact us at privacy@tailoredgrc.com.

13. AI and Automated Processing

TailoredGRC uses artificial intelligence features within its services to assist with compliance tasks, such as drafting policies, procedures, and control responses. AI processing operates under human review; it does not make automated decisions that produce legal or similarly significant effects concerning individuals. Customer data is not used to train AI models. For full details on how TailoredGRC uses AI — including the underlying provider, zero-data-retention configuration, and data handling — see our AI Governance Disclosure.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through reasonable means, which may include posting the updated policy on our website with a revised effective date.

15. Contact

Questions about this Privacy Policy or our privacy practices can be directed to:

TailoredGRC, Inc.
Email: privacy@tailoredgrc.com

← Back to Legal documents