Privacy Policy

AnchorOne ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

Information We Collect

Information You Provide

We collect information you voluntarily provide to us, including:

• Name, email address, company name, and contact information when you request an assessment or contact us
• Organizational information you provide during the assessment process
• Communications you send to us

Information Collected Automatically

When you visit our website, we automatically collect certain information about your device, including:

• IP address and browser type
• Pages visited and time spent on pages
• Referring website or source
• Cookie data (see our Cookie Policy for details)

Microsoft 365 Telemetry

For organizations we serve, we collect telemetry data from Microsoft 365 environments through authorized access, including:

• Identity and access configuration data
• Device compliance and security state
• Email security configuration
• Backup and recovery status

This data is collected solely to provide our governance services and is accessed via delegated administrative privileges (GDAP) granted by the customer.

How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our services
• Conduct baseline assessments and generate governance reports
• Communicate with you about our services
• Monitor and enforce compliance with our standard
• Improve and optimize our website and services
• Comply with legal obligations

How We Share Your Information

We do not sell, rent, or trade your personal information. We may share information in the following circumstances:

• With your consent: When you explicitly authorize us to share specific information
• Service providers: With third-party vendors who perform services on our behalf (e.g., hosting, analytics)
• Legal requirements: When required by law, subpoena, or legal process
• Business transfers: In connection with a merger, acquisition, or sale of assets

Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit and at rest
• Multi-factor authentication for access to customer environments
• Role-based access controls and privileged identity management
• Regular security assessments and monitoring

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Assessment data and governance reports are retained for the duration of the service relationship and for a reasonable period thereafter for legal and compliance purposes.

Your Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Restriction: Request restriction of processing of your information
• Portability: Request transfer of your information to another service provider
• Objection: Object to processing of your information for certain purposes

To exercise these rights, contact us at [email protected].

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last Updated" date. We encourage you to review this Privacy Policy periodically.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

AnchorOne
Email: [email protected]
Website: anchorone.io