Privacy Policy

1. About the Operator

For personal information collected directly through the CMP website, user accounts, support channels, and related Services, Lynxes Solutions Pvt Ltd acts as the applicable business or data controller where required by law. For Customer Data submitted by an organization, that organization generally determines the purposes and means of processing, and Lynxes Solutions Pvt Ltd processes such data to provide CMP in accordance with the applicable agreement and law.

2. Information Collected

Depending on your interaction with CMP, the information collected may include:

Account Information

• Name;
• Business email;
• Job title;
• Organization;
• Department;
• Username;
• Contact information;
• Account credentials;
• Roles and permissions; and
• Authentication information.

Organization Information

• Organization name;
• Business contact information;
• Organization structure;
• Departments;
• User roles;
• Subscription information;
• Company configuration; and
• Authorized administrators.

Customer Content

Customers may upload or create:

• Audit plans;
• Audit schedules;
• Audit templates;
• Audit responses;
• Audit findings;
• Audit evidence;
• Attachments;
• Photographs;
• Observations;
• NC records;
• CAPA records;
• Incident reports and investigation records;
• Lessons learned records;
• Compliance review meeting agendas, attendees, and minutes;
• Compliance assessments;
• Action items;
• Reports;
• PDF/Excel exports;
• Audit logs; and
• Other information entered by authorized users.

For organization accounts, the subscribing organization generally determines what information is entered into CMP and how it is used.

3. Payment and Transaction Information

Where subscriptions or in-product purchases are made through Paddle, Paddle acts as the Merchant of Record for the applicable transaction.

Lynxes Solutions Pvt Ltd may receive transaction-related information necessary to:

• Identify the customer;
• Provision a subscription or purchase;
• Associate a subscription or purchase with a CMP account;
• Manage subscription status;
• Provide customer support; and
• Maintain transaction records.

Lynxes Solutions Pvt Ltd does not intentionally collect or store complete payment-card numbers through CMP when payment is processed by Paddle.

Paddle processes payment and transaction information according to its own applicable privacy notice and terms.

4. Communications

When you contact Lynxes Solutions Pvt Ltd, request a demonstration, request support, submit a form, or otherwise communicate through CMP, Lynxes Solutions Pvt Ltd may collect:

• Name;
• Email;
• Organization;
• Job title;
• Message contents;
• Support requests;
• Technical information; and
• Communication history.

Lynxes Solutions Pvt Ltd uses this information to respond to requests, provide support, improve CMP, and maintain business records.

5. Technical and Usage Information

The CMP Services may automatically collect:

• IP address;
• Browser type;
• Device type;
• Operating system;
• Approximate location derived from IP address;
• Login information;
• Access timestamps;
• Pages/features accessed;
• Application events;
• Error information;
• Security events; and
• Performance information.

Lynxes Solutions Pvt Ltd uses this information for security, troubleshooting, analytics, performance, and operation of the Services.

6. Cookies

CMP may use cookies and similar technologies for:

• Authentication;
• Sessions;
• Security;
• Preferences;
• Website functionality;
• Analytics; and
• Performance monitoring.

Where required by applicable law, Lynxes Solutions Pvt Ltd will request consent before using non-essential cookies.

You may control cookies through your browser settings and available cookie-management tools. More information is available in the CMP Cookie Policy.

7. Use of Personal Information

Lynxes Solutions Pvt Ltd may use personal information to:

• Provide and maintain CMP;
• Create and manage accounts;
• Authenticate users;
• Manage organizations;
• Provide customer support;
• Manage subscriptions;
• Maintain security;
• Prevent fraud and abuse;
• Improve features and performance;
• Send service-related communications;
• Send marketing communications where legally permitted;
• Maintain business records;
• Comply with legal obligations; and
• Protect the rights and property of Lynxes Solutions Pvt Ltd and CMP.

8. Legal Bases for Processing

Where applicable law requires a legal basis, Lynxes Solutions Pvt Ltd may rely on:

• Contract – to provide CMP and fulfill the contractual obligations of Lynxes Solutions Pvt Ltd;
• Legitimate Interests – for security, fraud prevention, product improvement, business operations, and customer support;
• Consent – where legally required for marketing, cookies, analytics, or other processing; and
• Legal Obligation – where processing is required by law.

9. Customer Data and Organizational Responsibility

Where an organization uploads personal information concerning employees, customers, suppliers, auditors, contractors, or other individuals, that organization is generally responsible for determining the lawful purpose and basis for processing and for authorizing the transfer of such information to CMP.

CMP processes such Customer Data to provide the Services and in accordance with applicable agreements and law.

Where appropriate, the parties may enter into a separate Data Processing Agreement.

10. Sharing of Personal Information

Lynxes Solutions Pvt Ltd does not sell personal information as a commercial product.

Lynxes Solutions Pvt Ltd may share information with:

Service Providers

Providers supporting:

• Cloud hosting;
• Infrastructure;
• Authentication;
• Email;
• Monitoring;
• Analytics;
• Security;
• Customer support;
• Backup; and
• Other essential business functions.

Paddle

Where applicable, relevant information may be shared with Paddle for:

• Payment processing;
• Merchant-of-Record services;
• Subscription management;
• Tax processing;
• Fraud prevention;
• Transaction support; and
• Legal or regulatory requirements.

Authorities

Information may be disclosed where required by law, court order, regulatory requirement, or necessary to protect rights or security.

Business Transfers

Information may be transferred as part of a merger, acquisition, restructuring, financing, or sale of assets, subject to applicable law.

11. International Data Transfers

CMP and its service providers may process information in countries other than your country of residence.

Where applicable law requires safeguards for international transfers, Lynxes Solutions Pvt Ltd will use appropriate legally recognized safeguards.

12. Data Retention

Lynxes Solutions Pvt Ltd retains personal information only for as long as reasonably necessary for:

• Providing Services;
• Maintaining accounts;
• Security;
• Legal obligations;
• Dispute resolution;
• Enforcing agreements; and
• Legitimate business records.

When information is no longer required, Lynxes Solutions Pvt Ltd may delete, anonymize, or securely dispose of it.

13. Data Security

Lynxes Solutions Pvt Ltd uses commercially reasonable technical and organizational safeguards, which may include:

• Encryption in transit;
• Encryption at rest where supported;
• Role-based access controls;
• Authentication controls;
• Multi-Factor Authentication;
• Single Sign-On;
• Organization-level data separation;
• Audit logs;
• Activity monitoring;
• Backup and recovery;
• Access restrictions; and
• Security monitoring.

No internet-based system can guarantee absolute security.

14. Privacy Rights

Depending on applicable law, you may have rights to:

• Access personal information;
• Correct inaccurate information;
• Request deletion;
• Restrict processing;
• Object to processing;
• Request data portability;
• Withdraw consent; and
• Lodge a complaint with an applicable supervisory authority.

Some rights are subject to legal limitations.

For information processed on behalf of an organization, you may need to contact your organization first.

15. Privacy Requests

Privacy requests may be submitted to our privacy team.

Lynxes Solutions Pvt Ltd may request information reasonably necessary to verify your identity.

Lynxes Solutions Pvt Ltd will respond within the timeframe required by applicable law.

16. Marketing Communications

Where legally permitted, Lynxes Solutions Pvt Ltd may send product updates, educational materials, and other business communications.

Where consent is required, Lynxes Solutions Pvt Ltd will obtain appropriate consent.

You may unsubscribe from marketing communications at any time using the unsubscribe mechanism provided.

Transactional, security, account, and service-related communications may continue where necessary.

17. Children’s Privacy

CMP is a business and organizational SaaS platform and is not directed toward children under 18.

Lynxes Solutions Pvt Ltd does not knowingly collect personal information directly from children under 18 for the purpose of providing CMP accounts.

18. Third-Party Websites and Services

CMP may contain links to third-party websites or integrate with third-party services.

Lynxes Solutions Pvt Ltd is not responsible for the privacy practices of third-party websites or services.

19. Changes to This Privacy Policy

Lynxes Solutions Pvt Ltd may update this Privacy Policy to reflect changes in the Services, laws, data-processing practices, technology, or operations.

The updated policy will be published with a revised Last Updated date.

20. Contact Information