Privacy Policy

1. Introduction

Sept & Stone, LLC ("Company," "we," "us") operates IGOIL, a secure governance and operations platform. This Privacy Policy explains how we collect, use, store, and protect information when you use IGOIL. We are committed to safeguarding the confidentiality and security of your data.

2. Information We Collect

Account Information

When you create an account or are invited to the platform, we collect your name, email address, and role within your organization. We also store authentication credentials in encrypted form.

Organizational Data

You and your organization may upload governing documents, corporate records, administrative materials, and other institutional data ("Organizational Data"). This data is stored securely and is only accessible to authorized users within your organization.

Usage Data

We collect information about how you interact with the platform, including login times, pages visited, actions taken, and device information. This data is used to maintain security, improve the platform, and generate audit logs.

3. How We Use Your Information

We use your information to:

• Provide, operate, and maintain the IGOIL platform
• Authenticate your identity and manage access controls
• Process governance actions, approvals, and workflows
• Generate audit trails and institutional records
• Send notifications related to platform activity requiring your attention
• Improve and develop the platform
• Comply with legal obligations

4. Data Storage and Security

Your data is stored on secure, encrypted infrastructure. We use industry-standard security measures including encryption at rest and in transit, role-based access controls, and regular security assessments.

Organizational Data is logically separated between organizations. Users from one organization cannot access data belonging to another organization.

5. Data Sharing

We do not sell your data. We do not share your data with third parties except:

• Service providers: We use trusted infrastructure providers (hosting, database, authentication) that process data on our behalf under strict contractual obligations.
• Legal requirements: We may disclose information if required by law, court order, or governmental regulation.
• With your consent: We may share data when you explicitly authorize us to do so.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the platform's services. Organizational Data, including governance records and audit trails, is retained for the duration of your organization's use of the platform. Upon account termination, we provide a reasonable period to export your data before it is permanently deleted from our systems.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Export your data in a portable format
• Object to certain processing of your information

To exercise these rights, contact us at privacy@septandstone.com.

8. Cookies

IGOIL uses essential cookies required for authentication and session management. We do not use advertising or tracking cookies. We do not use third-party analytics that track your behavior across other websites.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the platform or by email. The effective date at the top of this page indicates when this policy was last revised.

10. Contact

For questions about this Privacy Policy or your data, contact us at privacy@septandstone.com.