Privacy Policy

1. Who we are

CapGRC is a SaaS platform developed and operated by CAPTOSEC Inc., a company incorporated in Quebec, Canada. CAPTOSEC acts as the responsible party for the processing of personal information collected through the CapGRC platform and this website.

Privacy Officer: info@captosec.com

2. Information collected

We collect the following personal information:

• First name, last name and professional title
• Professional email address
• Organization name and industry
• Platform usage data (pages visited, features used)
• Technical data (IP address, browser, operating system)
• Information voluntarily provided through contact forms

3. Purposes of processing

Your information is used to:

• Provide and improve CapGRC services
• Respond to your requests and provide customer support
• Inform you of updates and new features (with consent)
• Ensure the security and compliance of the platform
• Meet our legal obligations

4. Legal bases for processing

In accordance with Law 25 and GDPR, the processing of your information is based on: performance of the service contract, your consent (for marketing communications), our legitimate interests (security, service improvement) and our legal obligations.

5. Data hosting and transfer

All your data is hosted exclusively in data centers located in Canada (Ontario and Quebec). No transfer to servers located abroad is carried out. This practice ensures your compliance with the data sovereignty requirements of Law 25.

6. Retention period

Your information is retained for as long as necessary for the purposes described, and at most for the duration of your contract plus 3 years for billing data and 1 year for contact data. Anonymized usage data may be retained indefinitely.

7. Your rights

In accordance with Law 25, you have the following rights:

• Right of access to your personal information
• Right to rectification of inaccurate information
• Right to erasure (under conditions)
• Right to data portability
• Right to withdraw your consent at any time
• Right to file a complaint with the Commission d'accès à l'information (CAI)

To exercise your rights: info@captosec.com

8. Cookies

We use cookies essential to the operation of the site and analytical cookies (with your consent) to improve your experience. See our cookie policy for more details.

9. Changes

This policy may be updated periodically. The date of the last change appears at the top of this page. Substantial changes will be communicated to you by email.

10. Contact

For any questions regarding the protection of your personal information: