How NeoGRC handles personal data

A clear account of the personal data used across our website, business conversations and account administration—and the choices available to individuals.

Effective and last updated 8 September 2026

Scope and responsibility

This Privacy Policy explains how NeoGRC Solutions Pvt Ltd collects, uses, shares and protects personal data when you visit neogrc.com, request a demonstration, communicate with us, administer an account or use NeoGRC services. NeoGRC is the controller for website, business-contact and account-administration data described here. Our head office is at NeoGRC Solutions Pvt Ltd, WeWork Embassy Vertex, Ground floor, 4th Block, Janardhana towers, Embassy Vertex, Shanthala Nagar, Richmond town, Bengaluru, Karnataka-560025, India.

When NeoGRC processes personal data inside a customer workspace on that customer’s documented instructions, the customer normally acts as controller and NeoGRC as processor. That processing is governed by the applicable customer agreement and Data Processing Agreement.

Information we collect

Depending on your interaction, we may receive your name, business email, telephone number, job title, employer, country, enquiry details, meeting notes, account role, authentication status and support communications. We may also process technical information such as IP address, browser, device, requested pages, timestamps, diagnostic events and security logs.

We receive this information directly from you, from your organisation, through your use of the service, or from business partners where they are authorised to share it. Please avoid including unnecessary personal or sensitive information in free-text fields.

Purposes and lawful bases

We use personal data to respond to enquiries, arrange relevant demonstrations, provide and secure accounts, perform contracts, support users, operate and improve the website and platform, prevent misuse, meet legal duties and maintain business records. Depending on the context, our lawful basis may be steps requested before a contract, performance of a contract, legitimate interests, compliance with law or consent.

Where we rely on legitimate interests, those interests include communicating with prospective customers, delivering a secure business service, understanding product demand and protecting NeoGRC and its users. We balance those interests against individual rights and expectations.

Sharing, transfers and retention

We may share data with service providers that support hosting, communications, security, customer support and professional advice; with an organisation that administers your account; or where law, a regulator or a valid legal process requires disclosure. Providers are limited by contractual and confidentiality obligations appropriate to their role.

Where personal data is transferred internationally, NeoGRC uses an available lawful transfer mechanism and appropriate safeguards. We retain data only for as long as reasonably necessary for the stated purpose, contractual obligations, security, dispute handling and legal record-keeping, then delete or anonymise it where appropriate.

Your choices and rights

Depending on the law that applies, you may ask for access, correction, deletion, restriction, objection, portability or withdrawal of consent. You may also complain to the relevant supervisory authority. Rights are not absolute, and we may need to verify identity or retain limited information where the law requires it.

Send privacy questions or rights requests to admin@neogrc.com. We will review the request, explain any information needed to process it and respond within the period required by applicable law.