Privacy Policy

1. Information We Collect

Account information. When you register, we collect your name, email address, organization name, and login credentials.

Questionnaire and document content. We collect the answers you enter into our questionnaires and the documents generated from them (SSPs, POA&Ms, gap reports). You agree not to enter Controlled Unclassified Information (CUI) or other protected data; you should describe your security practices, not the protected data itself.

Payment information. Payments are processed by our third-party payment processor. We do not store full payment card numbers; we receive limited transaction and subscription details needed to manage your account.

Usage data. We collect technical information such as IP address, browser type, device information, and how you interact with the Service, to operate, secure, and improve it.

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service, including generating your documents.
• Process payments and manage subscriptions.
• Communicate with you about your account, support requests, and service updates.
• Secure the Service and detect or prevent fraud or abuse.
• Comply with legal obligations.

We do not sell your personal information.

3. How Your Content Is Processed

To generate documents, your questionnaire answers are processed by our systems and by third-party AI providers we use to draft document text. We instruct these providers to process your content only to provide the Service. Because the Service is not authorized for CUI, you must not submit CUI or other protected data (see our Terms of Service).

4. Data Storage and Security

Your data is stored on commercial cloud infrastructure. We use reasonable administrative, technical, and organizational measures to protect it. However, no system is perfectly secure, and we cannot guarantee absolute security. The Service is not intended for the storage of CUI, classified, or export-controlled information.

5. Third-Party Service Providers

We share information with service providers who help us operate the Service, such as cloud hosting, database, payment processing, and AI document-generation providers. These providers are bound to use your information only to provide services to us.

6. Data Retention

We retain your account information and content for as long as your account is active or as needed to provide the Service, and as required to comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data (see Section 8).

7. Cookies and Similar Technologies

We use cookies and similar technologies to keep you logged in, remember preferences, and analyze usage. You can control cookies through your browser settings; disabling some cookies may affect functionality.

8. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing. To exercise these rights, contact us at support@cmcguardianapp.com. You may also delete your account through your account settings.

9. Children's Privacy

The Service is intended for business use by individuals 18 and older. We do not knowingly collect personal information from children.

10. International Users

The Service is operated from the United States. If you access it from outside the U.S., you understand your information will be processed in the U.S.

11. Changes to This Policy

We may update this Policy from time to time. Material changes will be communicated through the Service or by email. The “Last updated” date reflects the most recent revision.

12. Contact

Questions about this Policy: support@cmcguardianapp.com — SharpAudit LLC.