Legal · Privacy

Privacy Policy

This policy explains what information Wrightbrained Security collects when you visit cmmccomplianceengine.com or purchase the CMMC Compliance Engine, how we use it, and the choices you have.

  • Controller — Wrightbrained Security
  • Contact — Jil@jil-wright.com
  • Effective date — March 23, 2026

1. Who we are

Wrightbrained Security (“we,” “us”) operates cmmccomplianceengine.com and sells the CMMC Compliance Engine. We are the controller of the personal information described in this policy. You can reach us at Jil@jil-wright.com.

2. Information we collect

Information you provide

  • Order and license details — your name, business/entity name, and email address provided at checkout.
  • License acceptance records — the business name, email, agreement version, and timestamp recorded when you accept the license agreement.
  • Payment information — processed by our payment processor (see Section 4). We do not collect or store full card numbers on our systems.
  • Support communications — messages you send us, including for the included questions call.

Information collected automatically

When you visit the site we (and our providers) may collect standard log and device data such as IP address, browser type, pages viewed, and referring URLs, including through cookies or similar technologies. See Section 7. We use Google Analytics for website log information.

3. How we use information

  • To process your purchase and deliver the product and license files.
  • To issue and administer your license, including recording your acceptance of the license agreement.
  • To provide included benefits — updates, new tools during your license year, and the monthly questions call.
  • To provide customer support and respond to your requests.
  • To meet legal, tax, and accounting obligations and to enforce our agreements.
  • To operate, secure, and improve the website.

4. Payment processing

Payments are processed by Stripe. When you pay, your payment details are handled by Stripe under its own terms and privacy policy, available at stripe.com/privacy. We receive confirmation of payment and limited transaction details (such as the business name you entered, your email, and an order identifier) but not your full card number.

5. Service providers

We share personal information only with providers that help us run the business, under agreements that limit their use of it. These include providers for payment processing — Stripe email/delivery – Google Workspace, file hosting/download delivery – Cloudflare R2, workflow automation and records storage – N8N Cloud, Notion, and website hosting – Bluehost and Google Analytics.

6. How we share information

We do not sell your personal information. We disclose it only: (a) to the service providers in Section 5; (b) when required by law, legal process, or to protect our rights; and (c) in connection with a merger, acquisition, or sale of assets, in which case we will continue to protect it under this policy.

7. Cookies & analytics

We use cookies or similar technologies to operate the site and understand how it is used. We use Google Analytics. You can usually control cookies through your browser settings.

8. Data retention

We keep order, license-acceptance, and transaction records for as long as needed to provide the product and to meet legal, tax, and accounting requirements — typically 2 years. We keep other information only as long as necessary for the purposes described above.

9. Data security

We use reasonable administrative, technical, and physical safeguards to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Your rights & choices

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, or to object to or restrict certain processing. To make a request, contact us at Jil@jil-wright.com. We will verify and respond as required by applicable law.

11. International users

We operate in the United States, and your information is processed there.

12. Children

The site and product are intended for businesses and are not directed to children, and we do not knowingly collect personal information from children.

13. Changes to this policy

We may update this policy from time to time. We will post the updated version here and revise the “Effective date” above. Material changes will be communicated as required by law.

14. Contact

Questions about this policy or your information: Jil@jil-wright.com, Wrightbrained Security.