Privacy Policy

Last updated July 9, 2026

What we collect

Account details (name, email, company), the compliance records and files you upload, and standard server logs. Payment details are handled by Stripe and never touch our servers.

How we use it

To run the service: storing your evidence vault, generating packets, and sending deadline reminder emails. We do not sell your data or use it for advertising.

Storage and security

Data is stored on managed infrastructure in the United States. Uploaded files are stored in access-controlled object storage and served through expiring signed links.

Retention and deletion

Because CHRO requires records to be retained for at least two years after project close, we keep project vaults intact by default. You can request full deletion of your account and data at any time by emailing [email protected].