Get Started

1. Platform Purpose and Scope

The Platform provides tools to help organizations prepare for and maintain compliance with regulatory frameworks including, but not limited to, GDPR, HIPAA, CMMC, SOC 2, and ISO 27001. These tools include AI-powered assessments, document management, evidence tracking, compliance roadmaps, reporting capabilities, and audit readiness support.

The Platform is not a legal service or a substitute for legal or regulatory advice. Customers remain solely responsible for meeting their compliance obligations.

8. Subscriptions, Trials, and Fees

8.1 Free Trial

We offer a fifteen (15) day free trial. During this period, you may be required to provide valid credit card information. You will not be charged until the trial period ends. You may cancel at any time during the trial without incurring any charges.

8.2 Subscription Plans

You may subscribe to one or more compliance frameworks within the Platform. Each framework subscription is contracted for a one (1) year term and may be renewed annually.

8.3 Payment Options

• You may pay monthly or prepay the entire year in a single payment.
• Customers who prepay annually receive a ten percent (10%) discount.
• All fees are non-refundable once charged, except as expressly stated in these Terms.

8.4 Renewal and Cancellation

• Subscriptions automatically renew for successive one-year terms unless canceled prior to the renewal date.
• Cancellation means disabling auto-renewal; you will continue to have access until the end of the current paid term.
• You may cancel framework subscriptions individually.
• No refunds are provided for partial terms or unused services.

8.5 Non-Payment

We reserve the right to suspend or terminate access to the Platform for non-payment or invalid payment methods.

18. Contact

For questions or legal notices:

DataHubz LLC
6760 Corporate Dr, Suite 100
Colorado Springs, CO 80919
Email: contact@datahubz.com

1. Information We Collect

1.1. Account & Billing Information

• Name, email address, phone number, organization name
• Usernames, passwords, authentication tokens
• Role and permission levels
• Payment information (credit card details securely processed by our payment provider, never stored in plain text by DataHubz)

1.2. Organizational & Compliance Data

• Uploaded documents (e.g., policies, evidence, reports)
• Framework mappings, audit trails, risk assessments
• Notes, comments, and activity logs entered by users

1.3. Technical Data

• Device and browser type
• IP address and geographic region
• Log data, session timestamps, usage metrics

1.4. Cookies and Tracking

We use cookies and similar technologies to:

• Authenticate sessions
• Remember user preferences
• Monitor performance and security

We do not use third-party tracking for advertising or profiling purposes.

2. How We Use Your Information

We use collected data solely for legitimate business and compliance-supporting purposes, including:

• To deliver, maintain, and improve the Platform
• To generate assessments, roadmaps, and reports (including AI-powered automation)
• To provide user support and respond to inquiries
• To process subscriptions, billing, and free trial enrollments
• To maintain security and prevent unauthorized access
• To comply with legal or regulatory obligations

We do not sell, rent, or share your personal or organizational data with third parties for marketing purposes.

3. Legal Basis for Processing (GDPR Compliance)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:

• Performance of a contract (e.g., user account, subscription, or service agreement)
• Legitimate interests, such as improving security and user experience
• Consent, where required (e.g., optional cookies)
• Legal obligations, including compliance with applicable laws

4. Data Retention and Deletion

We retain your data as long as necessary to:

• Provide you with services during active subscriptions
• Fulfill legal, regulatory, or audit requirements
• Maintain records of compliance efforts

When a subscription or individual framework is canceled, related data may be retained for up to thirty (30) days for account recovery or export. After this period, data is deleted or anonymized in accordance with our data retention policy.

5. Data Sharing and Subprocessors

We may share data under strict controls in the following scenarios:

5.1. Authorized Subprocessors

We use trusted vendors to provide infrastructure, storage, billing, and analytics. All subprocessors are bound by written agreements that meet confidentiality, security, and data protection standards.

Examples include:

• Cloud infrastructure providers (e.g., AWS, Azure)
• Document storage and processing platforms
• Authentication and user management tools
• Payment processors (e.g., Stripe)

5.2. Legal Requirements

We may disclose data when required to:

• Comply with subpoenas, court orders, or other legal processes
• Protect the rights, safety, or property of DataHubz, users, or others
• Cooperate with law enforcement, regulators, or compliance inquiries

6. International Transfers

Your data may be stored and processed in the United States or other jurisdictions. We ensure appropriate safeguards are in place for international transfers, including:

• Standard Contractual Clauses (SCCs)
• Data Processing Agreements (DPAs)
• ISO/IEC 27001–aligned practices

7. Data Security

We implement administrative, technical, and physical safeguards to protect your data, including:

• End-to-end encryption (at rest and in transit)
• Role-based access control (RBAC)
• Multi-factor authentication (MFA)
• Regular security audits and penetration testing
• Vulnerability management and incident response plans

We align our security practices with standards such as NIST, HIPAA Security Rule, and ISO 27001.

8. Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Object to or restrict processing
• Receive a copy of your data (data portability)
• Withdraw previously granted consent

To exercise your rights, contact us at contact@datahubz.com. We may request verification of your identity.

9. HIPAA Compliance Statement

For customers subject to HIPAA, DataHubz is prepared to operate as a Business Associate. Upon request, we will enter into a Business Associate Agreement (BAA) and adhere to HIPAA's privacy, security, and breach notification requirements.

10. Children's Privacy

The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

11. Changes to this Policy

We may update this Privacy Policy to reflect changes in law, technology, or service scope. We will notify users of material changes through the Platform or via email. Your continued use after such updates constitutes acceptance.

12. Contact Information

If you have questions or concerns about this Privacy Policy or our data practices, please contact:

DataHubz LLC
6760 Corporate Dr, Suite 100
Colorado Springs, CO 80919
Email: contact@datahubz.com