Last updated July 19, 2026
Gracen Platforms LLC provides a Software as a Service (SaaS) platform for managing Governance, Risk, and Compliance (GRC). Gracen Platforms LLC also operates a website for the purposes of advertising our services and educating our customers. Our websites consist of https://www.gracen.io and https://app.gracen.io. We also use various third-party applications for the tracking and management of customer data, such as a CRM or marketing automation platform.
This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You. We use Your Personal Data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.
This Privacy Policy aims to inform you about how we collect, use, disclose, and store information about you when you use and/or interact with our websites, including downloading materials from our resources library, interacting with our community, or requesting a demo; and when you register for and/or attend any of our events, webinars, or the conferences we attend (collectively "Events").
The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
For the purposes of this Privacy Policy:
Account means a unique account created for You to access our Service or parts of our Service.
Affiliate means an entity that controls, is controlled by, or is under common control with a party, where "control" means ownership of 50% or more of the shares, equity interest, or other securities entitled to vote for election of directors or other managing authority.
Application refers to Gracen, the software program provided by the Company.
Company (referred to as either "the Company," "We," "Us," or "Our" in this Agreement) refers to Gracen Platforms LLC, 406 Orchid Ave, Corona Del Mar, CA 92625, #217.
Cookies are small files that are placed on Your computer, mobile device, or any other device by a website, containing the details of Your browsing history on that website among its many uses.
Country refers to: California, United States.
Device means any device that can access the Service, such as a computer, a cellphone, or a digital tablet.
Personal Data is any information that relates to an identified or identifiable individual.
Service refers to the Application or the Website or both.
Service Provider means any natural or legal person who processes the data on behalf of the Company, to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service, or to assist the Company in analyzing how the Service is used.
Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
Website refers to Gracen, accessible from https://www.gracen.io.
You means the individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.
While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You, including but not limited to: email address; first name and last name; phone number; address, state, province, ZIP/postal code, city; and Usage Data.
Usage Data is collected automatically when using the Service. It may include information such as Your device's Internet Protocol address (IP address), browser type and version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers, and other diagnostic data.
When You access the Service through a mobile device, We may collect information including the type of mobile device You use, a unique device ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile browser You use, unique device identifiers, and other diagnostic data. We may also collect information that Your browser sends whenever You visit our Service or access it through a mobile device.
We use Cookies and similar tracking technologies to track activity on Our Service and store certain information, including beacons, tags, and scripts. The technologies We use may include:
Cookies or Browser Cookies. A cookie is a small file placed on Your device. You can instruct Your browser to refuse all Cookies or to indicate when a Cookie is being sent. If You do not accept Cookies, You may not be able to use some parts of our Service.
Web Beacons. Certain sections of our Service and our emails may contain small electronic files (also known as clear gifs, pixel tags, and single-pixel gifs) that permit the Company to count users who have visited pages or opened an email and for other related statistics.
Cookies can be "Persistent" or "Session" Cookies. Persistent Cookies remain on Your device when You go offline, while Session Cookies are deleted as soon as You close Your web browser. We use both for the purposes below:
Necessary / Essential Cookies (Session, administered by Us) - essential to provide services available through the Website, authenticate users, and prevent fraudulent use of accounts.
Cookies Policy / Notice Acceptance Cookies (Persistent, administered by Us) - identify if users have accepted the use of cookies on the Website.
Functionality Cookies (Persistent, administered by Us) - remember choices You make, such as login details or language preference, to provide a more personal experience.
The Company may use Personal Data for the following purposes: to provide and maintain our Service, including monitoring its usage; to manage Your Account and Your access to Service functionality; for the performance of a contract You have entered into with Us; to contact You by email, phone, SMS, or other electronic means about updates or informative communications, including security updates; to provide You with news, offers, and information about goods, services, and events unless You have opted out; to manage and respond to Your requests; for business transfers such as a merger, divestiture, restructuring, or asset sale; and for other purposes such as data analysis, identifying usage trends, and improving our Service, products, and marketing.
We may share Your personal information with Service Providers to monitor and analyze use of the Service and to contact You; during business transfers; with Affiliates, who will be required to honor this Privacy Policy; with business partners to offer certain products or promotions; with other users when You interact in public areas of the Service; and with Your consent for any other purpose.
The Company will retain Your Personal Data only as long as necessary for the purposes set out in this Privacy Policy, to comply with legal obligations, resolve disputes, and enforce our agreements and policies. Usage Data is generally retained for a shorter period, except when needed to strengthen security, improve functionality, or as legally required.
Your information, including Personal Data, is processed at the Company's operating offices and any other locations where parties involved in processing are located, which may be outside Your jurisdiction. Your consent to this Privacy Policy, followed by submission of such information, represents Your agreement to that transfer. The Company will take reasonable steps to ensure Your data is treated securely and no transfer will take place to an organization or country without adequate controls in place.
You have the right to delete or request that We assist in deleting the Personal Data We have collected about You. You may update, amend, or delete Your information by signing in to Your Account and visiting account settings, or by contacting Us directly. We may need to retain certain information when We have a legal obligation or lawful basis to do so.
If the Company is involved in a merger, acquisition, or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.
Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities.
The Company may disclose Your Personal Data in the good-faith belief that such action is necessary to comply with a legal obligation; protect and defend the rights or property of the Company; prevent or investigate possible wrongdoing in connection with the Service; protect the personal safety of users or the public; or protect against legal liability.
The security of Your Personal Data is important to Us, but no method of transmission over the Internet or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.
Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If You are a parent or guardian aware that Your child has provided Us with Personal Data, please contact Us; We will take steps to remove that information from Our servers.
Our Service may contain links to other websites not operated by Us. We strongly advise You to review the Privacy Policy of every site You visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
We may update Our Privacy Policy from time to time. We will notify You of changes by posting the new Privacy Policy on this page and updating the "Last updated" date above. You are advised to review this Privacy Policy periodically for any changes.
If you have any questions about this Privacy Policy, You can contact us by email: info@gracen.io.