Change Toolkit logo

Change Toolkit

Privacy Policy

Last updated: November 25, 2025

1. Introduction

This Privacy Policy explains how Change Toolkit (“we”, “our”, “the Service”) collects, uses, stores, and protects your information. We take your privacy seriously and are committed to handling your data responsibly.

2. Information We Collect

2.1 Personal Information

We collect:

  • Email address (required for login)
  • Authentication information (managed by Azure Static Web Apps)
  • Optional profile information you may provide

2.2 Usage Data

We may collect information about how you interact with the Service, including:

  • Pages or modules you access
  • Actions taken within the toolkit
  • Basic technical logs (error events, performance data)

2.3 Project and Module Data

You may enter business-related information into the platform (e.g., plans, assessments, deliverables). This data belongs to you, not us.

3. How We Use Your Information

We use your information to:

  • Provide and operate the Service
  • Authenticate users
  • Save and display your project data
  • Improve functionality and stability
  • Communicate with you (e.g., account or system updates)

We do not sell or rent your information.

4. How Your Data Is Stored

Your information is stored securely within Microsoft Azure services, including:

  • Azure Static Web Apps (authentication)
  • Azure Cosmos DB (data storage)

Azure encrypts data at rest and in transit.

5. Cookies and Authentication

We use Azure authentication cookies to maintain your login session. We do not manually store passwords, tracking cookies, or advertising cookies.

6. Data Sharing

We do not share your personal information with third parties except when required to:

  • Provide core functionality (e.g., Azure Communication Services for email)
  • Comply with legal obligations

Third-party processors are bound by security and confidentiality requirements.

7. Data Retention

We retain your data for as long as your account remains active. If you delete your account, associated data will be removed, subject to backup retention periods.

8. Your Rights

You may:

  • Request a copy of your personal data
  • Request correction of inaccuracies
  • Request deletion of your account and data

9. Security

We apply industry-standard safeguards to protect your data. However, no method of digital transmission or storage is completely secure. Use the Service at your own discretion.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will always be available on this page.

11. Contact

For privacy questions or requests: [email protected]