Privacy Policy

When you contact us through our forms, email, or scheduled calls, we collect the information you provide — typically your name, work email, organisation, and a description of the engagement you're considering.

When you use the SOC 2 Deal Readiness Analyzer, your assessment answers stay in your browser until you choose to unlock the full report. At that point, we collect your name, work email, company, assessment responses, readiness and deal-pressure scores, and your consent choices so we can generate and deliver the report and respond to your request.

When you visit ektreasure.com, our hosting provider (Vercel) automatically logs technical request data — IP address, user-agent, and request paths — used solely for operating the site and protecting it against abuse.

We use the information you submit to respond to your inquiry, prepare scoped proposals, and stay in touch about an active engagement. We do not sell or rent your information.

Analyzer submissions are used to generate your requested report, classify the commercial urgency of the request, route appropriate follow-up, detect abuse, and improve the analyzer. Optional marketing messages are sent only when you select the separate marketing checkbox.

If we send you a written proposal or marketing follow-up, we'll always identify ourselves clearly and include an opt-out path.

This site does not use third-party advertising cookies. Vercel may set strictly-necessary cookies required to serve the site and protect against abuse.

We may use privacy-respecting analytics to measure events such as assessment starts, completion, report unlocks, downloads, and consultation clicks. Analyzer analytics events are designed not to include your name, email address, company name, or free-form personal information.

Submissions may be processed by our hosting, email-delivery, CRM, booking, analytics, and abuse-prevention providers solely to operate the analyzer, deliver the requested report, and support follow-up. We configure these providers through controlled integrations and do not share analyzer data with advertising networks.

Where we engage subprocessors for delivering services under a signed agreement (for example, a compliance-automation vendor supporting a SOC 2 or ISO 27001 readiness engagement), they are bound by the data-protection terms of that agreement, not by this page.

We retain lead and assessment information only for as long as needed to provide the report, manage the related business relationship, meet legal obligations, and maintain appropriate business records. Retention periods are reviewed by purpose, and information is deleted or de-identified when it is no longer required.

We use access controls, transport encryption, rate limiting, validation, restricted integration credentials, and other administrative and technical safeguards appropriate to the sensitivity of the information.

You can withdraw optional marketing consent or request access, correction, or deletion of personal information you've sent us by emailing info@ektreasure.com. We may need to verify your identity before fulfilling a request and will respond within the time required by applicable law.

Questions about this policy or your data should go to info@ektreasure.com. EK Treasure Inc. is headquartered in Toronto, Canada.