Privacy Policy

ADMT Ledger ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our SaaS platform.

1. Information We Collect

A. Information You Provide: We collect information you provide directly to us, such as your name, email address, organization details, and payment information when you register for an account.

B. Platform Data (The Ledger): When you use our platform to document ADMT compliance, we process the data you input (e.g., tool metadata, risk assessment responses, pre-use notices). We act as a Service Provider / Data Processor for this information under the CCPA/CPRA.

C. Employee/Applicant Opt-Out Data: Through our integrations (e.g., Greenhouse, Lattice) and public notice pages, we may process opt-out requests from your employees or applicants. This data is processed strictly on your behalf to effectuate the opt-out within your HR stack.

2. How We Use Your Information

We use the collected information for various purposes, including:

• To provide, maintain, and secure the Service.
• To process your transactions and manage your subscription.
• To construct and maintain the Immutable Ledger audit trail on your behalf.
• To communicate with you, including sending technical notices, updates, and support messages.

3. Crucial Note on The Immutable Ledger

To provide regulatory auditability, certain compliance events (like publishing a notice or signing an attestation) are cryptographically hashed and chained in our Immutable Ledger. This structural audit data cannot be deleted or altered once recorded. We strongly advise against entering sensitive Personal Information (PI) directly into the Ledger payload fields unless explicitly required by law.

4. Sharing Your Information

We do not sell your personal information. We may share information with:

• Service Providers: Third-party vendors that perform services on our behalf (e.g., payment processing, cloud hosting).
• Integrations: If you connect third-party apps (e.g., Greenhouse) to ADMT Ledger, we will share necessary data (like opt-out signals) to facilitate the integration.
• Legal Requirements: We may disclose information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

5. Data Security

We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable.

6. Your Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights regarding your personal information, including the right to know, delete, and correct your data. To exercise these rights regarding the data we hold about you as a business, please contact us. Note that requests regarding data we hold as your Service Provider must be directed to your organization.

For questions or concerns about our privacy practices, please contact our Data Protection Officer at privacy@admtledger.com.