Privacy Policy

Effective: October 1, 2026

AffirmReady LLC collects only what it needs to run the Service, never sells personal information, and never stores your evidence files. Your evidence stays in your own systems.

Information We Collect

Account and contact information: name, business email, company name, job title, and phone number.
Sign-in and security information: your password (stored only in hashed form), your authenticator setup (stored encrypted), and one-time recovery codes (stored only in hashed form).
Billing information: plan, billing address, and payment status. Stripe processes payment details; we do not store full card or bank account numbers.
Customer Data: assessment answers, evidence register entries (such as what an item is, who owns it, when to review it, and where it is kept), notes, and links you add. We do not store your evidence files. You must not enter CUI or other prohibited information (see Terms of Service, Section 5).
Readiness Check submissions: if you ask us to email you a summary, your name, business email, company name, readiness score, email preferences, and the date of your request. We don't store your individual answers, and taking the Readiness Check without requesting a summary doesn't save your contact information.
Support communications: messages you send to support@affirmready.com and our replies.
Website chat: messages you type into the assistant on our website. Chats are processed by Microsoft to provide the assistant. Please don't enter passwords or sensitive company information in chat.
Usage and device information: log data, IP address, browser type, pages visited, and feature usage, collected through cookies, browser local storage, and similar technologies, including a page-view counter provided by Polsia.
Business contact information: publicly available business contact details we use for business-to-business outreach, such as company name and work email.

How We Use Information

We use information to provide, secure, and improve the Service; verify accounts and protect sign-in; process payments; send service, security, trial, and billing notices; email Readiness Check summaries you request; respond to support requests; send marketing emails, which you may opt out of at any time; and meet legal obligations. Account and service emails are sent from notify.affirmready.com and do not track opens or link clicks. We do not use Customer Data for advertising, and we do not sell or rent personal information.

Automated Tools and AI

We use automated and AI-assisted tools to operate parts of our business, including software development, customer support, and marketing. Customer Data is processed by these tools only as needed to provide and support the Service, subject to confidentiality obligations. We do not use Customer Data to train AI models.

How We Share Information

We share information only with service providers that help us operate the Service, under contracts that limit their use of the data. These currently include Polsia (application hosting, operations, and website analytics), Stripe (payment processing), Resend (account and service emails), Microsoft (business email, support, and the website chat assistant), and Cloudflare (domain and web traffic services). We may also disclose information when required by law, to protect our rights or users’ safety, or as part of a merger, acquisition, or sale of assets, with notice to you.

Security

We encrypt data in transit and at rest, require multi-factor authentication with an authenticator app for every account, encrypt authenticator set up information, store passwords and recovery codes only in hashed form, and restrict internal access to those who need it. Because we do not store evidence files, the most sensitive records of your security program stay in your own systems. No system is completely secure. If a breach affects your personal information, we will notify you as required by law, including the Michigan Identity Theft Protection Act.

Retention

We keep account and Customer Data while your subscription is active and for 30 days after cancellation so you can export it, then delete it, except where law requires longer retention, such as billing records. We delete Readiness Check summary requests 12 months after the request unless you become a customer.

Your Choices and Rights

You may access, correct, export, or delete your personal information by contacting support@affirmready.com or through your account. You may unsubscribe from marketing emails using the link in any message. Depending on where you live, you may have additional rights under state privacy laws, and we will honor verified requests as required.

Children

The Service is for businesses and is not directed to anyone under 18. We do not knowingly collect information from children.

Changes and Contact

We will post updates here and notify customers by email of material changes. Questions or requests: support@affirmready.com (Monday through Friday, 8 AM to 5 PM Eastern), or AffirmReady LLC, 4370 Chicago Dr. SW #544, Grandville, MI 49418, United States.