Privacy Policy

1. Introduction

CorpSpider ("we," "our," or "us") operates the Double Materiality Assessment Tool (the "Service"). This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

We are committed to protecting your privacy and handling your data in an open and transparent manner in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

The data controller for your personal data is:

3. Information We Collect

3.1 Personal Data

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you ("Personal Data"). This includes:

• Email address - Used for account creation, authentication, and communication
• Stripe Customer ID - For payment processing and subscription management
• Subscription information - Including status and period details

3.2 Assessment Data

We collect and process the assessment data you create while using our Service, including:

• ESRS topic scores and ratings
• Comments and notes added to assessments
• Generated reports and analysis results

3.3 Technical Data

We may automatically collect certain information when you visit our Service:

• IP address
• Browser type and version
• Time and date of visits
• Pages visited and time spent on pages

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contractual necessity: To provide you with the Service and fulfill our subscription agreement
• Legitimate interests: To improve our Service, ensure security, and prevent fraud
• Legal obligation: To comply with accounting and tax regulations
• Consent: For optional features where we seek your explicit consent

5. How We Use Your Data

We use the collected data for various purposes:

• To provide and maintain our Service
• To process payments and manage subscriptions
• To notify you about changes to our Service
• To provide customer support
• To gather analysis or valuable information to improve our Service
• To monitor the usage of our Service
• To detect, prevent and address technical issues

6. Data Sharing and Disclosure

6.1 Service Providers

We may employ third-party companies and individuals to facilitate our Service ("Service Providers"), to provide the Service on our behalf, or to assist us in analyzing how our Service is used. These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

• Stripe: Payment processing - Their privacy policy can be found at stripe.com/privacy
• Render: Cloud hosting services

6.2 Legal Requirements

We may disclose your Personal Data in the good faith belief that such action is necessary to:

• Comply with a legal obligation
• Protect and defend our rights or property
• Prevent or investigate possible wrongdoing in connection with the Service
• Protect the personal safety of users of the Service or the public
• Protect against legal liability

7. International Transfers

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction.

8. Data Retention

We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.

Assessment data will be retained for the duration of your subscription and for a reasonable period thereafter to allow for account recovery. You may request deletion of your data at any time by contacting us.

9. Your Data Protection Rights

Under GDPR, you have the following rights:

• Right to erasure: You have the right to request deletion of your personal data
• Right to restrict processing: You have the right to request restriction of processing your personal data
• Right to withdraw consent: Where we rely on consent, you have the right to withdraw it at any time

To exercise any of these rights, please contact us at contact@corpspider.com.

10. Data Security

The security of your data is important to us. We implement appropriate measures to protect your personal data against unauthorized processing. These measures include:

• Regular security assessments and monitoring
• Access controls mechanisms

11. Cookies and Tracking

We may use essential cookies to operate our Service and maintain your session. We do not use tracking cookies for advertising purposes. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

12. Children's Privacy

Our Service does not address anyone under the age of 16 ("Children"). We do not knowingly collect personally identifiable information from anyone under the age of 16. If you are a parent or guardian and you are aware that your Child has provided us with Personal Data, please contact us.

13. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "last updated" date.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

14. Contact Us

If you have any questions about this Privacy Policy, your data protection rights, please contact us: