Privacy Policy

This Privacy Policy describes how Honeypotz Inc ("we", "our", or "us"), a Connecticut corporation located in Greenwich, CT, collects, uses, and protects your information when you use our Honey Compliance AI platform and related services.

We are committed to protecting your privacy and maintaining the security of your personal information in accordance with applicable data protection laws, including GDPR, CCPA, and federal regulations for government contractors.

Personal Information

• Account Information: Name, email address, company name, job title
• Contact Details: Phone number, business address
• Payment Information: Billing address, payment method details (processed securely by our payment processors)
• Profile Information: User preferences, compliance requirements, industry type

Usage Information

• Platform Activity: Features used, documents generated, compliance assessments completed
• Technical Data: IP address, browser type, device information, access times
• Analytics Data: Usage patterns, performance metrics, error logs

Business Information

• Compliance Data: Business policies, risk assessments, compliance frameworks
• Generated Documents: Privacy policies, compliance reports, assessment results
• Integration Data: API usage, third-party service connections

Service Provision

• Providing and maintaining our compliance automation platform
• Generating customized compliance documents and policies
• Performing compliance assessments and monitoring
• Processing payments and managing subscriptions

Communication

• Sending service updates, security alerts, and compliance notifications
• Responding to customer support inquiries
• Providing educational content about compliance requirements
• Marketing communications (with your consent)

Legal and Security

• Complying with legal obligations and regulatory requirements
• Protecting against fraud, security threats, and misuse
• Enforcing our terms of service and policies
• Supporting legal proceedings when necessary

Security Measures

• Encryption: All data is encrypted in transit and at rest using industry-standard protocols
• Access Controls: Role-based access with multi-factor authentication
• Network Security: Firewalls, intrusion detection, and regular security audits
• Data Centers: SOC 2 Type II certified facilities with physical security controls

Compliance Certifications

• SOC 2 Type II compliance audit
• ISO 27001 information security management
• GDPR compliance program
• FedRAMP-ready security controls for government contractors

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce agreements. Specific retention periods vary based on data type and applicable regulations.

Data Subject Rights (GDPR)

• Right to Access: Request copies of your personal information
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal information
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to certain types of processing

California Consumer Rights (CCPA)

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising privacy rights

How to Exercise Your Rights

To exercise any of these rights, please contact us at privacy@honeypotz.comor use the privacy controls in your account settings. We will respond to your request within the timeframes required by applicable law.

Service Providers

• Cloud Infrastructure: AWS, Microsoft Azure (data processing and storage)
• Payment Processing: Stripe, PayPal (secure payment transactions)
• Analytics: Google Analytics (with anonymized IP addresses)
• Support Services: Intercom, Zendesk (customer support communications)
• Email Services: SendGrid, Mailchimp (transactional and marketing emails)

We only share personal information with third parties when necessary to provide our services, and we require all service providers to maintain appropriate security measures and use data only for specified purposes.

Honeypotz Inc is based in Connecticut, United States. We may transfer your personal information to countries outside your jurisdiction for processing. When we do so, we implement appropriate safeguards, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions for countries with equivalent data protection laws
• Binding Corporate Rules for intra-group transfers
• Your explicit consent where required by law

Honeypotz Inc
Privacy Officer
Greenwich, Connecticut, USA
Email: privacy@honeypotz.com
Phone: (555) HONEY-AI

Data Protection Officer (EU)

For EU-related privacy matters, you can contact our Data Protection Officer at:
Email: dpo@honeypotz.com

Supervisory Authority

If you are located in the EU and have concerns about our data processing practices, you have the right to lodge a complaint with your local supervisory authority.