Privacy Policy

This Policy applies to information processed in connection with operation of the Platform.

Calvyan collects limited information necessary to operate the Platform and deliver organizational risk intelligence. This may include:

• Contact information provided by organizational representatives
• Authentication metadata (such as login timestamps and authentication method)
• Anonymous assessment responses
• Organizational information required for aggregation and reporting
• Technical information such as cookies, session identifiers, and website analytics data

Assessment responses are anonymous by design.

• Individual responses are not identifiable
• Responses are analyzed in aggregate
• Results are reported at an organizational level

Calvyan does not design assessments for individual monitoring, evaluation, or profiling.

Information is used to:

• Maintain platform functionality and security
• Generate aggregated organizational risk insights
• Support organizational analysis and reporting

Information is not used for individual monitoring, enforcement, or performance evaluation.

Information is stored using reasonable technical and organizational safeguards designed to maintain confidentiality and integrity. Access is restricted to authorized systems and personnel.

Calvyan does not sell assessment response data. Information may be shared only:

• With the organization that commissioned the assessment
• With service providers required to operate the Platform

Shared outputs remain aggregated.

Information is retained only as long as necessary to support platform operation and analysis. Retention periods may be updated to reflect operational, legal, or service requirements.

This Policy may be updated to reflect changes in platform functionality. Updates will be reflected on this page.

For questions regarding this Policy or requests related to your information, please contact: legal@calvyan.com