Privacy notice

Effective September 24, 2026

This notice explains how cekeep handles information when you visit our website or use the compliance evidence service.

Information we collect

We collect account and workspace details you provide, billing identifiers supplied by our payment processor, evidence and questionnaire content you upload, and limited technical data such as IP address, browser information, and security logs.

How we use information

We use information to provide and secure the service, authenticate users, process subscriptions, deliver requested communications, troubleshoot problems, prevent abuse, and improve product reliability. We do not sell personal information.

Service providers

We use vetted infrastructure, storage, email, payment, and monitoring providers to operate cekeep. They process information only for contracted service purposes and under their applicable data-protection commitments.

Retention and deletion

Workspace content is retained while an account is active and for a limited period afterward when required for recovery, security, legal, or billing purposes. Workspace owners may request deletion, subject to legal retention requirements and routine backup expiration.

Your choices

You may request access, correction, export, or deletion of personal information. Rights vary by location. Workspace administrators control content submitted by their organization and should be contacted first for organization-managed data.

Security and contact

We use access controls, private object storage, encryption in transit, audit records, and operational safeguards appropriate to the service. No system is completely secure. Questions and privacy requests can be sent to [email protected].