1. Who We Are

ReadySOC is operated by STAR LL, a Nevada limited liability company ("we," "us," or "our"). This Privacy Policy explains how we collect, use, and protect information when you use ReadySOC at readysoc.com ("Service").

For privacy questions, contact us at hello@readysoc.com.

2. Information We Collect

Type	What	Why
Account data	Name, work email, company name, role	To create and manage your account
Compliance data	Control statuses, notes, evidence files you upload	To provide the core service
Usage data	Pages visited, features used, actions taken	To improve the service and fix issues
Technical data	IP address (anonymized), browser type, device info	Security and abuse prevention
Communications	Emails you send us	To respond to support requests

We do not collect payment card details directly. Payment processing is handled by our third-party payment processor (Stripe), subject to their privacy policy.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Send authentication emails (magic links) and account notifications
• Respond to your support requests
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations
• Send product updates and compliance tips (you can unsubscribe at any time)

We do not use your compliance documents or evidence files to train AI models. AI guidance features use only the control definitions and your stated status — not your uploaded files.

4. How We Share Your Information

We do not sell your personal information. We share data only in the following limited circumstances:

• Service providers: We use trusted third parties to help operate the Service (hosting, email delivery, payment processing). They are contractually bound to protect your data and may not use it for their own purposes.
• Within your workspace: Information you add to a shared workspace (controls, evidence, notes) is visible to other members of your company workspace.
• Legal requirements: We may disclose information if required by law, subpoena, or other legal process, or to protect the rights and safety of STAR LL, our users, or the public.
• Business transfers: If STAR LL is acquired or merges with another entity, your information may be transferred as part of that transaction. We will notify you before that occurs.

5. Data Storage and Security

Your data is stored on servers located in the United States. We implement industry-standard security measures including:

• HTTPS encryption for all data in transit
• Evidence files stored outside the web root, inaccessible via direct URL
• Per-company file isolation — no company can access another company's files
• Session tokens with expiry and secure, HTTP-only cookies
• Anonymized IP address logging

No method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. If you cancel your account:

• You may request a data export within 30 days of cancellation.
• After 30 days, your data may be permanently deleted from our systems.
• Anonymized, aggregated data may be retained indefinitely for analytics purposes.

7. Cookies and Tracking

We use minimal cookies necessary to operate the Service:

• Session cookie (rs_session): Keeps you logged in. Expires after 30 days or on logout.
• CSRF token: Protects against cross-site request forgery. Session-scoped.

We do not use advertising cookies, third-party tracking pixels, or behavioral analytics. We do not use Google Analytics or similar services.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your personal data.
• Portability: Request your data in a machine-readable format.
• Objection: Object to certain processing of your data.
• Unsubscribe: Opt out of marketing emails at any time via the unsubscribe link in any email.

To exercise any of these rights, email hello@readysoc.com. We will respond within 30 days.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, contact us at hello@readysoc.com.

10. Children's Privacy

The Service is intended for business use by adults. We do not knowingly collect personal information from anyone under 18 years of age. If we become aware that we have collected personal information from a minor, we will delete it promptly.

11. Third-Party Services

The Service uses the following third-party services, each subject to their own privacy policies:

• Anthropic: Powers AI guidance features. Prompts sent to Anthropic do not include your uploaded evidence files — only control IDs and status information.
• Stripe: Handles payment processing. We do not store payment card details.
• Google Fonts: Loads the Inter typeface from Google's CDN.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice in the Service at least 14 days before the changes take effect. Your continued use of the Service after that date constitutes your acceptance of the updated policy.

13. Contact Us

For privacy questions, data requests, or concerns:

STAR LL
Email: hello@readysoc.com
Nevada, USA