# General Security

{% hint style="info" %}
To see our full policy on data security and policy (including GDPR), please visit [supademo.com/privacy-policy](https://supademo.com/privacy-policy).
{% endhint %}

### **Personal Data**

Supademo does not collect Personal Information indiscriminately. We limit the type of Personal Information and the amount of Personal Information to what is necessary to fulfill the purposes identified in our Privacy Policy. Overall, we aim to minimize any data that we collect and process.

### Security and Privacy

As an organization, Supademo has implemented technical and organizational measures such as encryption, access controls, and data backups to ensure security.

Data privacy and security measures are implemented throughout the entire development and cloud storage process, from the initial design to the final deployment stage.

Your data is stored in the United States and is encrypted with industry-leading cloud vault standards. Supademo has a data protection officer that oversees GDPR compliance. To connect with the data representative, please email [engineering@supademo.com](mailto:engineering@supademo.com).

### **Access to Data**

Supademo users have the ability to access their personal data, which they can request to download or delete at any time. Deletion requests are executed within 30 days of the initial request.

### How Long We Keep Your Personal Information

We keep your personal information only for as long as we need to. This time period may depend on what we are using your information for, in accordance with this privacy policy. For example, if you have provided us with personal information as part of creating an account with us, we may retain this information for the duration your account exists on our system. If your personal information is no longer required for this purpose, we will delete it or make it anonymous by removing all details that identify you.

However, if necessary, we may retain your personal information for our compliance with a legal, accounting, or reporting obligation or for archiving purposes in the public interest, scientific, or historical research purposes or statistical purposes.

### Your Rights and Controlling Your Personal Information

**Restrict:** You have the right to request that we restrict the processing of your personal information if (i) you are concerned about the accuracy of your personal information; (ii) you believe your personal information has been unlawfully processed; (iii) you need us to maintain the personal information solely for the purpose of a legal claim; or (iv) we are in the process of considering your objection in relation to processing on the basis of legitimate interests.

**Objecting to processing:** You have the right to object to processing of your personal information that is based on our legitimate interests or public interest. If this is done, we must provide compelling legitimate grounds for the processing which overrides your interests, rights, and freedoms, in order to proceed with the processing of your personal information.



**Data portability:** You may have the right to request a copy of the personal information we hold about you. Where possible, we will provide this information in CSV format or other easily readable machine format. You may also have the right to request that we transfer this personal information to a third party.\


**Deletion:** You have a right to request that we delete the personal information we hold about you at any time, and we will take reasonable steps to delete your personal information from our current records. If you ask us to delete your personal information, we will let you know how the deletion affects your use of our website or products and services. There may be exceptions to this right for specific legal reasons which, if applicable, we will set out for you in response to your request. If you terminate or delete your account, we will delete your personal information within 30 days of the deletion of your account. Please be aware that search engines and similar third parties may still retain copies of your personal information that has been made public at least once, like certain profile information and public comments, even after you have deleted the information from our services or deactivated your account.
