Privacy Policy

What data do we collect?

For MSP partners and direct customers: name, email, organisation and billing details to create your account and invoice you. Inside the app: the content you enter yourself (policies, evidence, scope, notes). For end clients of an MSP: their data lives in the bundle the MSP manages; we only see it if the MSP opts into cloud mode.

What do we use it for?

To deliver the service, log you in, provide support, bill you, and send you a newsletter or release notes if you sign up. We do not use your content to train AI models and we share nothing with advertisers.

Where is your data?

By default ECP runs local-first: your client portfolio sits in a .ecpbundle.zip on your own machine and goes nowhere. If you opt into cloud mode, the data sits encrypted with an EU-based cloud provider (records and files). You can export and leave at any time. The full sub-processor list is available on request at [email protected].

Who else processes your data?

A short category list, all needed to run the service: an EU-based cloud provider (hosting, storage and AI), a transactional email provider (login and invites), a calendar/booking provider (Cal.com), and a payment provider for billing. No analytics tools, no ad networks. The full sub-processor list with name, address and purpose is available on request at [email protected].

Your rights

Under the GDPR you can view, correct, export or delete your data. Email us and we will sort it within 30 days. Unhappy? You can file a complaint with the Belgian Data Protection Authority (gegevensbeschermingsautoriteit.be).

Cookies

Only what is strictly needed to keep you logged in and remember your language. No tracking, no ads, no Google Analytics.

Changes

If we change this policy in a way that genuinely affects you, we will email you at least 30 days in advance. Small editorial updates just get a new date at the top.

Contact

Questions about privacy? Email us:

[email protected]

Core bv, VAT: BE 0861.455.911