Enterprise GRC Platform
Privacy Policy
How Tyndora collects, uses, and protects your personal information.
Information We Collect
What data we gather and why.
Information You Provide Directly
- • Name, email address, and contact information when you create an account
- • Company information and role when you sign up for Tyndora
- • Compliance data and evidence you upload to the platform
- • Messages and support requests when you contact our team
- • Payment information processed securely through our payment provider
Information Collected Automatically
- • IP address, browser type, and device information
- • Pages visited, time spent, and actions taken on the platform
- • Cookies and similar tracking technologies for platform functionality
- • Analytics data to improve our product and services
How We Use Your Information
The purposes behind data collection.
- • To provide and improve the Tyndora platform and services
- • To process transactions and send related information
- • To send transactional emails and support communications
- • To comply with legal and regulatory obligations
- • To prevent fraud, abuse, and security incidents
- • To analyze usage patterns and improve user experience
- • To send marketing communications (with your consent)
Data Protection & Security
How we keep your data safe.
Tyndora implements industry-standard security measures to protect your personal information:
- • AES-256 encryption for data at rest
- • TLS 1.3 encryption for data in transit
- • Multi-factor authentication for account security
- • Regular security audits and penetration testing
- • SOC 2 Type II compliance certification
- • Access controls and role-based permissions
Your Rights & Choices
Control over your personal information.
Depending on your location, you may have rights regarding your personal information:
- • Right to access your personal information
- • Right to correct inaccurate data
- • Right to request deletion of your data
- • Right to opt-out of marketing communications
- • Right to data portability (for applicable jurisdictions)
- • Right to lodge complaints with data protection authorities
To exercise any of these rights, contact our privacy team at privacy@tyndoragrc.com.
Data Retention
How long we keep your information.
We retain personal information for as long as necessary to provide our services and comply with legal obligations. You can request deletion of your account and associated data at any time.