Effective date: September 3, 2026
1. Who controls your information
The provider identified in your order or subscription confirmation is responsible for account and commercial information. For documents and personal information uploaded by a customer, that customer generally determines the purpose of processing and the provider acts as its service provider or processor.
2. Information we collect
We collect account and contact details, authentication records, company-profile information, billing and subscription data, product usage and security logs, support communications, and the files or data users choose to upload. Payment-card details are handled by the payment provider and are not stored directly by Exit Ready.
3. How we use information
We use information to provide and secure the service, authenticate users, process subscriptions, perform requested document and AI-assisted workflows, support customers, prevent fraud and abuse, meet legal obligations, and improve reliability and usability. If an owner starts a pilot evaluation, recorded goals, observations, reviewer decisions and timestamps support that evaluation. Product enquiries use the verified account email and are retained for up to 90 days in active storage, with encrypted backups subject to the additional retention described below.
4. How information is shared
Information may be processed by vetted providers supporting hosting, databases, storage, authentication, payments, email delivery, malware screening, monitoring, and AI features. It may also be shared with advisers or other users a customer authorizes, and when required by law or a valid legal process. We do not sell personal information.
5. International processing
Service providers may process information in countries other than the user’s location. Appropriate contractual and technical safeguards are used where required.
6. Retention
Information is kept while needed to provide the service and meet contractual, security, and legal requirements. Unless Archive or a legal hold applies, cancelled workspaces follow a 90-day active-data deletion period. Encrypted whole-database backups may persist for up to 30 additional days. Archive is designed for seven-year read-only retention.
7. Your choices and rights
Depending on location, individuals may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information. Requests involving customer-uploaded data may need to be directed to the customer organization that controls that data. Identity and authority may be verified before a request is completed.
8. Cookies and similar technology
Exit Ready uses essential technologies needed for authentication, security, session continuity, and core service operation. Any non-essential analytics or marketing technology will be disclosed and controlled as required.
9. Security
We use layered technical and organizational safeguards. More information is available on the Data Security page. No method of transmission or storage is completely risk-free.
10. Updates and contact
We may update this policy and will post the revised effective date. Privacy questions and rights requests can be started through the Contact page or the secure business channel associated with the account.