Privacy Policy

Introduction

TekRamp ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our FedRAMP compliance acceleration platform and related services (collectively, the "Service").

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

Information We Collect

Personal Information

We may collect personal information that you voluntarily provide when you:

• Register for an account or request a demo
• Fill out a contact form or subscribe to our newsletter
• Participate in surveys, promotions, or other interactive features
• Contact us for customer support

This information may include:

• Name, email address, and phone number
• Company name and job title
• Billing and payment information
• Any other information you choose to provide

Compliance Data

When you use our platform for FedRAMP compliance management, you may upload or input various types of compliance-related data, including:

• System Security Plan (SSP) documentation
• Control implementation details
• Evidence files and artifacts
• POA&M (Plan of Action and Milestones) data
• Organization and system configuration information

This compliance data is treated with the highest level of confidentiality and security, as detailed in the Security section below.

Automatically Collected Information

When you access the Service, we may automatically collect:

• Device information (browser type, operating system, device identifiers)
• Log data (IP address, access times, pages viewed, referring URL)
• Usage information (features used, actions taken within the platform)
• Cookies and similar tracking technologies

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process transactions and send related information
• Send administrative communications (updates, security alerts, support messages)
• Respond to your comments, questions, and requests
• Analyze usage patterns to enhance user experience
• Detect, prevent, and address technical issues or security breaches
• Comply with legal obligations

Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With third-party vendors who perform services on our behalf (hosting, analytics, payment processing)
• Compliance Partners: With consultants, 3PAOs, or agency representatives you explicitly invite to collaborate on your compliance package
• Legal Requirements: When required by law, regulation, or legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you have given us permission to share your information

Data Security

We implement robust security measures appropriate for protecting FedRAMP compliance data, including:

• Encryption of data in transit and at rest
• Multi-factor authentication
• Role-based access controls
• Regular security assessments and penetration testing
• Hosting on secure, compliant infrastructure (AWS GovCloud)
• Audit logging and monitoring

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to implementing industry best practices.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Compliance data is retained according to your subscription terms and applicable regulatory requirements.

Upon account termination, you may request deletion of your data, subject to any legal retention requirements.

Your Rights and Choices

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your personal information
• Object to or restrict certain processing activities
• Data portability (receive your data in a structured format)
• Withdraw consent where processing is based on consent

To exercise these rights, please contact us at info@tekramp.com.

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage, and assist in our marketing efforts. You can control cookie preferences through your browser settings, though disabling cookies may affect Service functionality.

Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected information from a child, we will delete it promptly.

International Data Transfers

Your information may be transferred to and processed in the United States, where our servers are located. By using the Service, you consent to such transfer and processing.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the revised policy.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at: