GDPR Compliance

isaeo is committed to protecting the personal data of users in the European Economic Area (EEA) and the UK in line with the General Data Protection Regulation (GDPR).

Lawful basis

We process personal data (your email and audit data) on the basis of contract performance (to provide the service) and legitimate interest (to secure and improve it).

Your rights

• Access — request a copy of the personal data we hold about you.
• Rectification — correct inaccurate data.
• Erasure — request deletion of your account and data ("right to be forgotten").
• Portability — receive your data in a machine-readable format.
• Objection — object to certain processing.

Data we store

Account email, hashed password, the sites and audit results you create, and billing records. We never sell your data.

Sub-processors

MongoDB Atlas (database hosting) and Razorpay (payment processing). Each is contractually bound to protect your data.