Privacy policy
Last updated 19 October 2026
Regulatory Compliance (compliance.manzill.com) lets you read regulatory controls and assess your organization against them. This page explains what we store when you use it.
Without signing in
You can read every page and assess controls without an account. Your answers stay in your own browser and are not sent to us. They are uploaded only if you sign in.
What we store when you sign in
- Your account: your name, email address and profile picture link, and the account ID that Google, Microsoft or LinkedIn gives us. If you sign in with an email link, we store only your email address.
- Your organization: its name, the cloud providers you choose, and who its members are.
- Your assessments: your answers, notes, recorded scores, and the control where you left off.
When you sign in with Google, we ask only for your basic profile and email address (the openid, email and profile permissions). We don't ask for access to your Gmail, Drive, contacts or any other Google data.
How we use it
Only to sign you in and to save and show your organization's assessments. Members of your organization can see its assessments and the names and email addresses of its other members. We don't sell your data, use it for advertising, or share it with other organizations.
Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
Cookies and browser storage
We don't use cookies, analytics or advertising trackers. The site keeps your sign-in, your light or dark theme and any answers given without signing in in your browser's local storage. Signing out removes the sign-in.
Who processes it for us
- Cloudflare runs our server and database.
- GitHub Pages serves the website.
- Google, Microsoft and LinkedIn handle sign-in if you choose them.
- Resend sends sign-in emails if you use email sign-in.
Like any web host, Cloudflare and GitHub may log technical details such as IP addresses to keep their services secure.
How long we keep it, and deleting it
We keep your account and your organization's assessments until you ask us to delete them. A sign-in lasts 30 days and is renewed while you keep using the site. Sign-in email links expire after 15 minutes.
To see, correct or delete your data, email manzill.surolia@gmail.com. We'll reply within 30 days.
Security
All traffic is encrypted over HTTPS. Sign-in tokens are stored on our side only as one-way hashes, and we never see your Google, Microsoft or LinkedIn password.
Changes
If we change this policy, we'll update this page and the date at the top.