Privacy Policy

Who we are

Effata is a software product that helps security teams assess GenAI DLP posture and generate vendor-ready policy implementation guidance. This policy describes how we handle your information.

Information we collect

Contact information you submit through our forms — name, work email, company, role, and any message you send us. We use it to respond to your request, provide the product, and share relevant product updates.

Assessment inputs you provide when using Effata — governance decisions, tool and licence selections, and configuration context. These are used to generate your assessments and deliverables.

Basic usage information needed to operate and improve the product.

Important: what not to upload

Please do not upload production secrets, credentials, API keys, regulated data (such as PHI or cardholder data), or confidential customer data unless a proper agreement covering that data is in place between your organization and Effata.

Effata's assessments are designed to work from governance decisions and configuration metadata — not from your sensitive data itself. If a workflow appears to require sensitive data, contact us first and we will agree the right handling.

How we use information

To provide the product and deliverables, respond to requests, improve Effata, and communicate with you about your account. We do not sell your information.

Data retention and deletion

We retain your data for the duration of your engagement with Effata and a reasonable period afterwards. You can request deletion of your data at any time by contacting us, and we will action it promptly.

Third parties

We use a small number of infrastructure providers (hosting, email, analytics) to operate the product. We share only what is necessary for them to provide their service to us.

Contact

Questions about this policy or your data? Reach us through the contact form and we will respond directly.