Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account information (name, email address, job title, organisation name)
• Authentication credentials (passwords are hashed, never stored in plain text)
• AI system records, governance data, and compliance information you enter into the platform
• Communications you send us, including support requests and enquiries

1.2 Automatically Collected Information

When you visit our website or use the platform, we may automatically collect log data (IP address, browser type, pages visited), device information, usage data, and cookies. See our Cookie Policy.

2. How We Use Your Information

• Provide, maintain, and improve the GovernXis platform and services
• Authenticate users and maintain account and platform security
• Process and respond to support requests and enquiries
• Send product updates and service notifications (with consent where required)
• Comply with applicable legal obligations and regulatory requirements
• Monitor platform security, detect fraud, and prevent abuse

3. Legal Basis for Processing (UK GDPR)

• Contract performance: Processing necessary to deliver platform services
• Legitimate interests: Security monitoring, fraud prevention, product improvement
• Legal obligation: Compliance with applicable laws and regulatory authority requests
• Consent: Marketing communications and analytics cookies where required

4. Data Sharing

We do not sell, rent, or trade your personal information. We may share data with infrastructure providers under data processing agreements, legal authorities where required by law, and in connection with a business transfer with appropriate notice.

5. Data Retention

We retain personal data as long as necessary to provide services and fulfil legal obligations. Platform audit logs are retained for a minimum of 7 years. Account data is deleted within 90 days of closure upon verified request.

6. Your Rights

You have the right to access, correct, erase, restrict, or port your personal data, and to withdraw consent or lodge a complaint with the ICO. Contact us at contact@governxis.com. We will respond within 30 days.

7. Security

We implement TLS 1.3 in transit, AES-256 at rest, role-based access controls, row-level PostgreSQL security, and immutable audit logging.

8. International Transfers

Data is primarily processed within the UK and EEA. Where transfers occur outside these regions, we ensure appropriate safeguards including standard contractual clauses.

9. Cookies

See our Cookie Policy for full details.

10. Changes

We will notify you of material changes to this policy. Continued use after changes take effect constitutes acceptance.

11. Contact

Governxis Technologies
Email: contact@governxis.com
Address: Oakham Garth, Leeds, LS9 9AP.
Company Registration: XXXXXX