Privacy Policy
Introduction
Prodio, Inc. d/b/a ChangeMap ('ChangeMap', 'we', 'our', or 'us') provides software and related services for organizational change management, transformation management, program management, and related business purposes. This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you use our websites, applications, and services.
Scope
This Privacy Policy applies to visitors, customers, account holders, authorized users, support requestors, and other individuals who interact with ChangeMap. The Service is intended solely for business users and is not directed to or intended for individuals under 18 years of age.
Information We Collect
We may collect account information, workspace and project information, evidence records, uploaded content, AI-generated outputs, billing metadata, support requests, analytics information, technical logs, browser and device information, IP addresses, and related operational data.
Organizational Information Submitted by Customers
ChangeMap is designed for organizational change management, transformation management, program management, and related business uses. Customers may submit information concerning projects, teams, stakeholders, organizational readiness, communications, and related business activities. Customers are responsible for ensuring they have appropriate authority and legal basis to submit personal information to ChangeMap.
Special Category Data
Customers may not upload or submit special-category or highly sensitive personal data, including health information, biometric data, racial or ethnic origin, religious beliefs, trade union membership, political opinions, or similar protected information unless expressly authorized in writing by ChangeMap.
How We Use Information
We use information to provide and maintain the Service, authenticate users, generate AI-powered insights, process subscriptions, provide support, improve performance, secure the platform, comply with legal obligations, and communicate with users.
Use of Artificial Intelligence and Third-Party Services
ChangeMap uses OpenAI and Anthropic services to generate insights, summaries, classifications, recommendations, and runtime evaluations. ChangeMap transmits data to OpenAI and Anthropic solely to provide requested AI-powered functionality. ChangeMap does not permit customer data submitted through its platform to be used for advertising purposes. OpenAI and Anthropic process data under their respective contractual commitments and service terms.
International Data Transfers
Information may be processed in the United States and other jurisdictions. Where required by law, we rely on appropriate contractual, technical, and organizational safeguards for international transfers.
Data Retention
Contact inquiries are retained for 180 days. Support tickets are retained for 90 days. Analytics and email delivery data are retained for up to 12 months or applicable provider limitations. Certain billing, tax, and accounting records may be retained longer where required by law.
Deletion and Recovery
Deleted accounts, workspaces, projects, evidence, and related records are placed into a recoverable state for up to seven (7) days and then permanently deleted, subject to backup, legal retention, and disaster recovery requirements.
Inactive Accounts
A workspace may be considered inactive when no workspace member has logged in and no active subscription exists for twelve (12) consecutive months. A first notice is sent after twelve months, a second notice thirty days later, and data may be permanently deleted thirty days after the second notice if no response is received.
Security
We use technical, administrative, and organizational safeguards including encryption in transit, access controls, authentication controls, secure hosting, logging, monitoring, and vendor security controls. No method of transmission or storage can guarantee absolute security.
GDPR Rights
Individuals in applicable jurisdictions may have rights to access, correct, delete, restrict, object to processing, and request portability of personal information, subject to applicable law.
U.S. State Privacy Rights
Residents of applicable U.S. states may have rights to know, access, correct, delete, and obtain copies of personal information, subject to applicable legal exceptions.
Representatives and DPO
ChangeMap has not designated an EU Representative, UK Representative, or Data Protection Officer at this time.
Changes to this Policy
We may update this Privacy Policy periodically. Changes become effective when posted unless otherwise required by law.