Privacy Policy
Introduction
Prodio, Inc. d/b/a ChangeMap ('ChangeMap', 'we', 'our', or 'us') provides software and related services for organizational change management, transformation management, program management, and related business purposes. This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you use our websites, applications, and services.
Scope
This Privacy Policy applies to visitors, customers, account holders, authorized users, support requestors, and other individuals who interact with ChangeMap. The Service is intended solely for business users and is not directed to or intended for individuals under 18 years of age.
Information We Collect
We may collect account information, workspace and project information, evidence records, uploaded content, AI-generated outputs, billing metadata, support requests, analytics information, technical logs, browser and device information, IP addresses, and related operational data.
Organizational Information Submitted by Customers
ChangeMap is designed for organizational change management, transformation management, program management, and related business uses. Customers may submit information concerning projects, teams, stakeholders, organizational readiness, communications, and related business activities. The Service may analyze named stakeholders and produce engagement, sentiment, influence, or related classifications from customer-submitted information. These outputs support organizational and project-level transformation analysis; ChangeMap is not designed to score employee job performance or make automated employment decisions. Customers are responsible for reviewing outputs and for ensuring they have appropriate authority and legal basis to submit and use personal information.
Special Category Data
Customers may not upload or submit special-category or highly sensitive personal data, including health information, biometric data, racial or ethnic origin, religious beliefs, trade union membership, political opinions, or similar protected information unless expressly authorized in writing by ChangeMap.
How We Use Information
We use information to provide and maintain the Service, authenticate users, generate AI-powered insights, process subscriptions, provide support, improve performance, secure the platform, comply with legal obligations, and communicate with users.
Use of Artificial Intelligence and Third-Party Services
ChangeMap currently transmits customer content and context to OpenAI for inference needed to provide AI-powered features, including interpretations, summaries, classifications, recommendations, and evaluations. ChangeMap does not use customer content to train ChangeMap general-purpose models and does not permit OpenAI or Anthropic to use customer content to train their general-purpose models or for advertising. The F10 summary Responses request explicitly disables provider application-state storage; other OpenAI requests may use provider defaults. This is not a representation that Zero Data Retention applies, and OpenAI may retain limited data under its API terms for abuse monitoring and related legal or security purposes. Anthropic is an authorized subprocessor but is not currently used for production inference.
International Data Transfers
Information may be processed in the United States and other jurisdictions. Where required by law, we rely on appropriate contractual, technical, and organizational safeguards for international transfers.
Data Retention
ChangeMap's retention policy is to retain contact inquiries for no more than 180 days, support tickets for no more than 90 days, and analytics and email delivery data for no more than 12 months, subject to applicable provider limitations and any shorter period required by law or a valid deletion request. Where automated enforcement is unavailable, ChangeMap will fulfill these limits through operational and provider controls. We may retain billing, tax, security, legal, and dispute-related records for longer where required or permitted by law.
Deletion and Recovery
A workspace owner may request deletion of a workspace. The workspace enters a seven (7) day grace period during which the request may be canceled; after the grace period, permanent purge begins for the workspace and its related project data. During ordinary use, evidence records are governed through archival, invalidation, or supersession rather than a user-facing hard-delete workflow. This product evidence-governance model does not limit valid rights or controller instructions to delete personal information under applicable law or the Data Processing Addendum. Backup copies, provider records, and information subject to legal, tax, security, or dispute-preservation obligations may remain until applicable retention periods or deletion cycles expire.
Inactive Accounts
ChangeMap does not currently delete a workspace automatically merely because it has been inactive for a stated period. We may establish or update inactivity and retention practices in the future, subject to notice and applicable contractual or legal requirements.
Security
We use technical, administrative, and organizational safeguards including encryption in transit, access controls, authentication controls, secure hosting, logging, monitoring, and vendor security controls. No method of transmission or storage can guarantee absolute security.
GDPR Rights
Individuals in applicable jurisdictions may have rights to access, correct, delete, restrict, object to processing, and request portability of personal information, subject to applicable law.
U.S. State Privacy Rights
Residents of applicable U.S. states may have rights to know, access, correct, delete, and obtain copies of personal information, subject to applicable legal exceptions.
Representatives and DPO
ChangeMap has not designated an EU Representative, UK Representative, or Data Protection Officer at this time.
Changes to this Policy
We may update this Privacy Policy periodically. Changes become effective when posted unless otherwise required by law.