Privacy Policy

1. Information We Collect

RiskAssure (operated by Wisr AI Inc.) collects the following types of information:

• Account Information: Name, email address, company name, and company domain provided during registration
• Usage Data: Information about how you interact with our service, including pages visited and features used
• Uploaded Documents: Compliance documents you upload for AI-powered analysis
• Chat Data: Conversations with our AI assistant to improve service quality

2. How We Use Your Information

We use collected information to:

• Provide and maintain our cybersecurity risk assessment services
• Generate risk scores and security recommendations for your organization
• Process and analyze uploaded compliance documents
• Send important service notifications and security alerts
• Improve our AI models and service quality
• Respond to your requests and provide customer support

3. Data Sources for Risk Assessment

Our risk assessments are generated using publicly available information (Open Source Intelligence - OSINT), including but not limited to: public vulnerability databases (CVE/NVD), technology detection services, public news sources, and publicly available breach databases. We do not perform active penetration testing or intrusive scanning of any systems.

4. Data Storage and Security

Your data is stored securely using industry-standard encryption and security practices. We use Amazon Web Services (AWS) infrastructure hosted in Canada (ca-central-1 region). Uploaded documents are stored in encrypted S3 buckets. Passwords are hashed using bcrypt with a cost factor of 12.

5. Data Sharing

We do not sell your personal information. We may share data with:

• Service Providers: Third-party services that help us operate (e.g., AWS, OpenAI for AI analysis)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

6. Data Retention

We retain your account data for as long as your account is active. Risk assessment data is retained to provide historical trend analysis. You may request deletion of your account and associated data by contacting us at [email protected].

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability

8. Cookies and Tracking

We use essential cookies for authentication and session management. We use analytics to understand service usage patterns. We do not use third-party advertising cookies.

9. Children's Privacy

RiskAssure is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children.

10. Contact Us

For privacy-related questions or requests, please contact us at [email protected].