Privacy Policy


Sprinto Technology Private Limited(" Sprinto" / " Company" / " We" / " Us"/" Our") respects the privacy of all the users, including but not limited to Sprinto's customers (" Customers"), employees, Account Administrator (as defined in the Terms of Service), representatives, contractors, vendors or suppliers of the Customers, customers or clients of the Customers, information security compliance consultants or auditors, so on and so forth (collectively the " User" / " You" / " Your") who use and access Sprinto's website domain (" Website") for availing service organization control (SOC) services, information security compliance services, support services or any other related services offered by Sprinto on its Website (" Services").Sprintois committed towards protecting and safeguarding the information, including personal information of its Users which may be collected by Sprinto in the course of providing the Services or in consequence of Your use or access of the Website. Any personal information collected from You on the Website shall be governed by this privacy policy (" Privacy Policy"). This Privacy Policy provides for the kind of information that is collected on the Website, use, disclosure and manner of handling of such information by Sprinto. The Users are advised to read this Privacy Policy, along with Sprinto's Terms of Service, before using or accessing the Website, or availing the Services or providing Sprinto with their information and / or personal information.

1. General

By using or accessing the Website or availing the Services or by otherwise giving Us Your Information through electronic, physical or other means, You confirm that You have the capacity to enter into a legally binding contract and that You have read, understood and agreed to the practices and policies outlined in this Privacy Policy and our Terms of Service (together the " Agreement"). You hereby consent to Our collection, use, sharing, and disclosure of Your Information as described in this Privacy Policy. If You do not agree with any aspects of this Privacy Policy, then You shall not be authorized to use or access the Website or the Services in any manner.

The collection and processing of information in the course of other contractual or commercial engagements that we may enter into with You, will be done in accordance with the specific terms applicable thereto, and not by this Privacy Policy.

2. Information being collected

You can access / use / browse the Website and avail the Services by signing-up and registering an account on the Website ("Account"). When a User registers an Account or communicates, in any manner, with Sprinto, We may collect and store any or all Information that can be used to identify You and identify the type of Services being availed by You including sensitive personal information and other non-personal information. The Information being collected may vary depending upon Your use of the Website or any Service.

The following information, may be collected by the Company ("Information"):

  1. Your full name, date of birth, contact details, email address, details of your company or organisation, financial information (credit card / debit card number, expiration date, CVV number, banking details, billing information, payment history, etc.) and any other related information / data (" Personal Information").
  2. information provided / uploaded by You or Your Account Administrator for availing the Service or collected by us through APIs for providing the Services, including but not limited to, information relating to Your company, business operations, products, services, technology / digital / online platforms, processes, structures, security practices, internal controls, employee background check information, so on and so forth;
  3. We also store cookies, tags, scripts, log files and other similar technologies to: (i) identify users (ii) track user activity, behaviour and movement on the on the Website; (iii) analyse user patterns and trends; (iv) track the sections, links, tabs or pages that are most visited by the users; and (v) to build a database of user preferences (" Cookies").
  4. We may also collect information about how You use the Website and / or the Services and information about Your server, software, usage statistics, traffic data, your internet protocol address, browser and operating system type, domain names, access times, time zone, date and time of access, referring URLs, location and location based information, and details regarding the parts of the Website that you access (" Behavioural Information")
  5. Account related information such as username and password;
  6. information provided by other users of the Website / Services;
  7. information collected or received from external sources such as Our partners, affiliates or third-party websites, platforms, applications, plugins or other third-party organisations providing services similar to Our Services; and
  8. information provided by You while contacting Us for assistance and support servic

3. Consent

By using / accessing / browsing the Website or availing the Services in any other manner, You acknowledge and agree that all Information, including Personal Information, provided by You to Us is voluntary which can be used in accordance with this Privacy Policy. The collection, use and disclosure of Personal Information requires Your express consent, unless there are other legal grounds available to Us to collect such information as further specified in this Privacy Policy. By using or accessing the Website or availing the Services or otherwise providing us with Your Personal Information, where applicable, You are providing Us with Your unconditional consent to Our collection, usage, disclosure and retention of the Personal Information in accordance with the terms of this Privacy Policy.

In the event of a change in the law applicable to data protection, You hereby expressly consent to Our continued use, storage, collection and disclosure of Your Information, including Personal Information, to the fullest extent permitted under such applicable law. We may reach out to You for obtaining additional consents and approvals as required under the amended law and You will be required to comply with such requests. Should You choose to not provide Us with such additional consents and approvals, we may have to discontinue Your access to or use of the Website and Your Account.

Use of information

We use your Information:

  1. to provide You the Services along with support services or other related services;
  2. to set up and maintain Your Account;
  3. to operate and improve the Website in order to foster a enhanced and positive user experience;
  4. for analysing data, tracking trends, building algorithms, creating databases for rating systems, recommendations engines, so on and so forth;
  5. to conduct audits and quality assessment procedures, whether as part of the services or otherwise;
  6. to analyse and monitor any errors, bugs or discrepancies on the Website, the Services and / or in relation to your Account;
  7. to analyse the use of our resources and troubleshooting problems in relation to the Website;
  8. specifically, Cookies to: (i) track User activity, behavior and movement on the Website; (ii) analyze User patterns and trends; (iii) track the sections, links, tabs and pages that are most visited by the User; and (iv) to build a database of User preferences; and
  9. for conducting market research and market behavior or for the purpose of improvement of Services or developing other products or services.

    Conduct of users

  10. Users must abide by the Privacy Policy and the Terms of Service available on the Website at the time of using / accessing / browsing the Website and / or availing / using the Services.
  11. Users must keep the user ID and password of their Sprinto Account confidential and shall not share it with other users or persons.
  12. Users shall ensure that they log out of their Sprinto Account on the Website when not in use so that any other person using the same system does not get access to the User's account.

    Your rights

  13. You may review, correct, update, or change your Personal Information collected by Us by sending an email to Us at
  14. If You wish to delete your Personal Information provided to Sprinto, You can do so by sending a request to Us at
  15. You may disable the browser cookies before using / accessing / browsing the Website or Services. However, if You do so, You may not be able to access certain features of the Website or the Services.
  16. You may choose not to provide us with information for non-mandatory fields.
  17. You may choose to withdraw Your consent by writing to Sprinto at

However, such deletion of Personal Information or withdrawal of consent may result in discontinuation of Your Account and access to the Website, along with discontinuation of the Services for which such Personal Information or consent is specifically required.

4. Retension of information

We retain Your Information, including Personal Information provide You with Services that You request, or as is reasonably necessary for the purposes listed in this Privacy Policy, including pursuing our legitimate business interests, conducting audits, complying with any legal, regulatory, tax or accounting requirements, preventing any illegal activities or suspected fraud and so on. Further, we may retain Your Information excluding Personal Information for the purposes of analysing data, tracking trends, building algorithms, creating databases, derivative data, rating systems, recommendations engines, so on and so forth. However, it is hereby clarified that Sprinto shall be the sole owner of any databases, derivative data, algorithms, analysis or systems created or maintained by Sprinto.

5. Disclosure

Sprinto does not disclose any Information to any individual or entity except as provided in this Privacy Policy. Sprinto may disclose the Information only when required under an applicable law to any authority authorized to collect such Information and only to the extent necessary. Sprinto may at its sole discretion, disclose the Information of its Users to: (i) its employees, agent, representatives, service providers and third party vendors who need to know the Information in order to process it for Us and to enable us to provide the Services, and who are subject to strict contractual confidentiality obligations; and (ii) third party service providers or other users involved in providing the Services or third party organizations / entities who may analyse such Information and other related data for the purpose of enhancing and improving the Services or developing new services or products, conducting research or analysis, marketing and promotion of the Website, the Services or other products or services and other related purposes. Sprinto does not sell or trade in any form or manner, the Information or Personal Information of its Users to any third party, in any form or manner.

6. Security

We are committed to ensure that Your Information, including Personal Information is secure with Us. To ensure the security and protection from any unauthorized access or disclosure we have in place appropriate physical, electronic and managerial procedures to safeguard and secure the Information, including Personal Information We collect on the Website or during provision of Services or support services thereof. We do not retain any Personal Information collected from You for any period longer than reasonably required by Us for the purpose of Our Services or such period as may be required by applicable laws. However, please be informed that despite the stringent security measures being adopted by Sprinto, there may still exist the risk of potential security breaches which are inherent in the use of the internet and the world wide web. Further, Sprinto shall not be responsible for any breach of security or for any actions of any third parties or events that are beyond Our reasonable control, including but not limited to, acts of god, natural calamities, war, terrorism, acts of government, hacking, cyber terrorism, unauthorised access to any information or data or other electronic devices and storage devices, device crashes, breach of security and encryption, so on and so forth.

7. Change in privacy and policy

Sprinto is committed to comply with the extant applicable laws of India. Sprinto reserves the right to amend, modify, add, delete or remove any portion of this Privacy Policy as may be required under any applicable law or if required to enhance and improve the Users' experience of the Website and / or the Services. Usage of Your Information shall be governed by the last updated or revised Privacy Policy which shall be available on the Website. Your continued use / access / browsing of the Website and / or the Services after any such amendment or modification signifies Your acceptance to such amendment or modification. If You do not agree with this Privacy Policy at any time, in part or as a whole, You must not use / access / browse the Website and / or the Services, in any manner whatsoever.

8. Disclaimer

Although We are committed to protecting Your privacy, We do not make any promise to the effect that Your Information, including Personal Information, or private communications will always remain private or may be disclosed in ways not otherwise described in this Privacy Policy. You assume all responsibility and risk for: (i) Your use of the Website and / or the Services; (ii) use of the internet generally; (iii) the Information or any other data or information you provide to Us; and (iv) Your conduct on and off the Website. Further, we assume no liability for any actions of third parties with regard to Your Information or Personal Information which You may have disclosed to such third parties by accessing or visiting platforms of such third parties. Sprinto shall disclaim any liability arising out of Your disclosure of Information or Personal Information to or any other dealings with any third parties or generally in Your use, access or browsing of the internet or internet-based platforms.

9. Governing law

This Privacy Policy shall, in all respects, be governed by and construed in all respect in accordance with the laws of India. Sprinto and the User agree to submit to the exclusive jurisdiction of the courts at Bengaluru, India, in connection with any dispute arising out of or in connection with this Privacy Policy.

10. Grievance redressal

If You have questions, comments, suggestions or grievance with respect to the Privacy Policy, please send Us an e-mail at

  • angellist
  • twitter
  • linkedin

© Sprinto 2021. All Rights Reserved