1. Introduction

Standardix (“Company,” “we,” “us,” or “our”) is committed to protecting your privacy and maintaining the security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our enterprise Standards, Quality Management, and Operational Governance Platform (the “Platform”) and related services.

By accessing or using the Standardix Platform, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with our policies, please do not access or use our services.

2. Information We Collect

2.1 Account Information

When you register for a Standardix account, we collect: full name, work email address, job title, department, organization name, and billing information (processed securely through our payment processors).

2.2 Platform Usage Data

We collect information about how you interact with the Platform, including: standards created and modified, workflow actions and approvals, audit trail activities, login timestamps and session duration, feature usage patterns, and device information (browser type, operating system, IP address).

2.3 Customer Data

Operational standards, procedures, documents, and all content you upload or create within the Platform are considered “Customer Data.” Standardix processes Customer Data solely to provide the Platform services under your instructions and does not use Customer Data for any other purpose.

3. How We Use Your Information

We use collected information to: provide, operate, and improve the Standardix Platform; process transactions and manage your account; send administrative communications, security alerts, and support messages; respond to your inquiries and provide customer support; comply with legal obligations and enforce our agreements; analyze usage trends to improve platform functionality; and prevent fraudulent activity and ensure platform security.

4. Data Security

Standardix implements industry-leading security measures to protect your data, including AES-256 encryption for data in transit and at rest, role-based access controls, two-factor authentication, comprehensive audit logging, regular security assessments, and SOC 2 aligned security controls. Despite these measures, no electronic transmission or storage system is 100% secure. We encourage you to use strong passwords and secure your account credentials.

5. Data Retention

We retain your account information and Customer Data for the duration of your subscription plus 90 days following account termination, unless a longer retention period is required by law. Audit logs are retained for 7 years to support compliance requirements. You may request earlier deletion of your data by contacting our Data Protection Officer.

6. GDPR Rights

If you are located in the European Economic Area, you have rights including: the right to access your personal data, right to rectification of inaccurate data, right to erasure (“right to be forgotten”), right to restrict processing, right to data portability, and right to object to processing. To exercise these rights, contact our Data Protection Officer at privacy@standardix.io.

7. Third-Party Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information with: service providers who assist in platform operations (under strict confidentiality agreements), legal authorities when required by applicable law, and successor entities in the event of a merger or acquisition (with appropriate privacy protections in place).

8. Contact Information

For privacy-related questions or to exercise your data rights, contact us at: privacy@standardix.io. Our Data Protection Officer is available for GDPR-specific inquiries.