Privacy Policy

Who we are

Offload Security ("[legal entity name]", "we") operates offloadsecurity.com and the Offload Platform. For privacy matters, contact privacy@offloadsecurity.com.

What we collect on this website

Contact and demo-request form submissions (name, work email, message), newsletter subscriptions, and privacy-respecting site analytics [specify analytics provider]. We do not sell personal data.

Free DPDP Readiness Checker

Our free DPDP Readiness Checker scores your answers entirely in your browser — your control-by-control questionnaire answers are not transmitted to us. If you choose to unlock the detailed report, we collect the work email and company name you enter, together with a summary of your result: your readiness score and band, your Significant Data Fiduciary likelihood, the obligation areas where gaps were found, and your organisation profile (such as sector and data-volume tier). We use this to send you the report and to follow up about your DPDP readiness (our legitimate interest / your request).

We only send marketing communications (DPDP updates and product content) if you expressly opt in using the optional checkbox — unlocking the report by itself does not subscribe you. You can withdraw consent, request a copy, or ask us to delete this data at any time by contacting privacy@offloadsecurity.com.

Checker submissions are delivered to us through Formspree (Formspree, Inc.), acting as a processor / service provider on our behalf [confirm processor terms, sub-processors, and hosting location with counsel]. We retain these leads for [retention period — to be set with counsel] and do not sell personal data.

What the platform processes

The Offload Platform processes customer-provided security data (findings, configurations, code excerpts) as a processor on the customer's behalf, governed by the customer agreement and data-processing agreement — not by this website policy. See the Trust Center for the data-handling architecture.

Legal bases, retention, your rights

[To be completed with counsel: legal bases (GDPR), DPDP Act notices and Data Principal rights, retention periods per data category, grievance officer details, international transfer mechanisms, cookie policy.]