Privacy Policy

Introduction

QSai, LLC ("CISO Marketplace," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit cisomarketplace.services and any related subdomains or partner properties within the CISO Marketplace ecosystem.

By accessing or using our platform, you consent to the practices described in this policy. If you do not agree, please discontinue use of our services.

Information We Collect

We may collect the following categories of information:

• Contact & Identity: name, email address, phone number, company name, job title
• Account Data: username, password (hashed), membership tier, purchase history
• Usage Data: IP address, browser type, pages visited, time on site, referral source
• Communication Data: messages submitted via contact, quote, or inquiry forms
• Payment Data: processed by Stripe; we do not store full card numbers
• AI Interaction Data: prompts and outputs from AI tools offered on the platform (e.g., Policy Generator, SOW Analyzer) — used to improve service quality and are not sold to third parties

How We Use Your Information

• Deliver and improve our services and platform
• Process transactions and send related notices
• Respond to inquiries, support requests, and proposals
• Send marketing communications (you may opt out at any time)
• Comply with legal obligations
• Detect and prevent fraud or unauthorized access
• Personalize your experience based on usage patterns

Cookies & Tracking

We use cookies and similar tracking technologies. See our Cookie Policy for full details. You may manage cookie preferences through your browser settings or our cookie consent banner.

Third-Party Services

We share data with trusted third parties only as necessary to operate the platform, including:

• Cloudflare — database (D1), self-hosted authentication (CISO Marketplace SSO), Workers/serverless compute, AI inference, CDN, and Turnstile bot protection
• Stripe — payment processing
• Anthropic / OpenAI / OpenRouter — AI model inference for platform tools
• Resend / email providers — transactional email delivery

We do not sell your personal information to third parties.

Data Retention

We retain personal data for as long as necessary to fulfill the purposes outlined in this policy, or as required by law. Account data is retained for the life of the account plus 90 days after deletion. Proposal and engagement records may be retained for up to 7 years for legal and compliance purposes.

Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal data
• Opt out of marketing communications
• Request data portability
• Lodge a complaint with a supervisory authority (EU/UK residents)
• Opt out of sale or sharing of personal information (California residents under CCPA)

To exercise any of these rights, contact us at info@cisomarketplace.services.

Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such data, contact us immediately.

Security

We implement industry-standard security controls including TLS encryption in transit, encrypted storage, access controls, and regular security reviews. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or a prominent notice on the platform. Continued use after changes constitutes acceptance.

Contact Us

QSai, LLC — CISO Marketplace
Email: info@cisomarketplace.services
Website: cisomarketplace.services