Privacy Policy

GRXForce ("GRXForce", "we", "us") provides a GRC compliance SaaS platform and managed compliance services. This policy covers the personal data we collect through grxforce.com, our AI chat assistant, our contact and enquiry forms, and any scheduling tools we link to. It does not cover data processed inside a customer's GRXForce platform account, which is governed by the applicable customer agreement.

• Contact and enquiry details you submit through our forms: name, work email, company, phone (optional), and message content.
• Chat conversations you have with the GRXForce Assist widget, including the messages you type.
• Scheduling information if you book a call through a linked scheduling tool, handled under that provider's own privacy policy.
• Cookies and similar technologies: a theme preference cookie, and, only after you accept our cookie banner, analytics cookies.
• Technical data collected automatically by our hosting provider, such as IP address, browser type, and pages visited, for security and reliability purposes.

• To respond to enquiries and schedule calls or demos.
• To operate the AI chat assistant and improve the answers it gives.
• To send service-related communications, and, where you've agreed, occasional product or compliance updates.
• To understand site usage and improve content, only where analytics cookies are active.
• To meet legal, security, and audit obligations.

We do not sell personal data. We share it only with service providers who process it on our behalf, such as our AI provider (to generate chat responses), our scheduling provider (to run demo bookings), our email and hosting infrastructure, and analytics providers once you've consented. Each acts under contractual confidentiality and security obligations, and only processes what's needed to deliver the relevant service.

We use strictly necessary cookies to remember your theme preference and to avoid repeatedly showing the same popups. Analytics cookies only load after you accept them in the cookie banner; declining keeps analytics off. You can clear cookies at any time through your browser settings.

We keep enquiry and chat data for as long as needed to respond to you and maintain a record of the interaction, and then delete or anonymize it, unless a longer period is required for legal, tax, or security reasons.

Depending on where you're located, you may have rights to access, correct, delete, restrict, or port your personal data, to object to certain processing, and to withdraw consent at any time, for example under the EU/UK GDPR or India's DPDPA 2023. To exercise any of these rights, email us at the address below; we'll respond within the timeline required by applicable law. If you believe we haven't resolved your concern, you may also lodge a complaint with your local data protection authority.

Because we operate across India, the US, and the EU, personal data may be transferred to and processed in countries other than your own. Where required, we rely on appropriate safeguards, such as standard contractual clauses, for these transfers.

We apply administrative, technical, and physical safeguards appropriate to the sensitivity of the data we hold, consistent with the frameworks we help our own customers meet. No system is completely secure, so we also maintain incident response procedures to act quickly if something goes wrong.

Our website and services are directed at business professionals and are not intended for individuals under 16. We do not knowingly collect personal data from children.

We may update this policy as our services or legal obligations change. Material changes will be reflected by updating the "Last updated" date above.

Questions or requests about this policy or your personal data: hello@grxforce.com, or by phone at +91 22 4890 0000 (India) / +1 (628) 400-7300 (US), Mon-Fri 9:00-19:00 IST.