Last updated September 2026
Privacy & Cookie Policy
This Privacy & Cookie Policy explains how Secro Inc. and its affiliated entities (“Secro,” “we,” “our,” or “us”) collect, use, disclose, and protect personal data when you visit www.secro.io, contact us, book a demo, or use Secro’s platform, applications, and related services.
It applies to website visitors, prospects, customers, partners, suppliers, platform users, and others who interact with Secro. Where Secro processes personal data on a customer’s behalf, the applicable customer agreement and data-processing terms also apply.
Secro Inc. is the website operator and has its main place of business in the United States. Company details are provided in Secro’s Legal Notice.
For privacy questions or data-subject requests, contact privacy@secro.io. For general, commercial, product, partnership, or demo inquiries, use the Secro contact page.
Personal data we collect
Depending on how you interact with Secro, we may collect:
Contact and account information: name, business contact details, company, role, country, account details, and communication preferences.
Inquiry and meeting information: form submissions, messages, demo requests, bookings, support communications, and feedback.
Website and technical information: IP address, browser, device, pages visited, referral source, interactions, form metadata, logs, and security events.
Platform and application information: user activity, workflow and audit logs, document metadata, uploaded content, extracted fields, settings, support information, and other data submitted to or generated through the services.
Customer content is processed according to the relevant customer agreement and data-processing terms.
Cookies, analytics, and consent
Secro may use cookies and similar technologies to operate and secure the website, remember preferences, understand performance, process forms and bookings, and – where enabled – measure campaigns.
Cookie categories may include:
The consent tool will contain the definitive list of active cookies and similar technologies, including the provider, purpose, category, and duration.
Secro may use Google Analytics to measure website traffic and interactions. Depending on the configuration, it may process IP address, device and browser information, pages visited, referral source, approximate location, session information, and content interactions. Where required, Google Analytics and other non-essential technologies will remain disabled until consent is provided.
Google Search Console provides aggregated search and indexing information, including queries, impressions, clicks, rankings, and technical errors. It does not ordinarily place analytics cookies directly on website visitors.
Website forms, Microsoft Bookings, Mailchimp, embedded content, CAPTCHA or security services, and similar tools may process information needed to provide their functions. Advertising pixels such as Google Ads or LinkedIn Insight Tag will be disclosed and activated only if used and where the required consent has been obtained.
Visitors can accept, reject, or manage non-essential cookies through Secro’s consent tool and can change their choices later through the cookie-settings link. The consent tool will provide the current provider, purpose, category, and duration of each active cookie or similar technology.
How we use personal data
We may use personal data to provide and secure the website and services; respond to inquiries and bookings; manage accounts, support, and customer or partner relationships; send requested or permitted communications; analyze and improve performance; provide AI-assisted features; maintain records and audit logs; prevent misuse; and meet legal, regulatory, and contractual obligations.
Legal bases
Where applicable, Secro relies on contract, legitimate interests, consent, and legal obligations. Consent may be used for non-essential cookies and certain marketing communications and can be withdrawn where applicable.
Sharing and service providers
Secro may share personal data with affiliates; hosting, infrastructure, security, analytics, form, booking, email, support, integration, and technology providers; professional advisers; authorities where required by law; and parties involved in a corporate transaction.
Secro does not sell personal data in the ordinary meaning of that term. Where applicable law defines “sale” or “sharing” more broadly, Secro will provide the required choices. A current sub-processor list is available on request at privacy@secro.io, unless otherwise provided under a customer agreement.
International transfers
Secro and its providers may process personal data in the United States, Switzerland, Poland, the European Economic Area, and other countries. Where required, Secro uses contractual protections, standard contractual clauses, data-processing agreements, or other lawful safeguards.
Retention and security
Secro retains personal data only as long as reasonably necessary for the purposes described in this policy or as required by law, contract, security, audit, or dispute-resolution needs.
Secro uses technical and organizational measures designed to protect personal data, including appropriate access controls, encryption, logging, monitoring, and secure infrastructure. No system can guarantee absolute security.
AI-assisted processing
Secro may process relevant data to provide document parsing, extraction, generation, comparison, discrepancy detection, review support, and other AI-assisted functionality. This processing is governed by applicable customer agreements and data-processing terms.
Secro does not use customer content to train public AI models unless expressly agreed or permitted under the applicable customer agreement.
Data breaches
Secro will respond to personal-data breaches and provide notifications where required by applicable law and relevant customer agreements.
Your privacy rights
Depending on applicable law, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data; withdraw consent; opt out of certain marketing; and complain to a data-protection authority.
To exercise a privacy right, contact privacy@secro.io. Secro may need to verify your identity before responding.
Marketing communications
You may unsubscribe from marketing emails at any time. Secro may still send service, security, legal, or account-related communications.
Children and third-party websites
Secro’s website and services are intended for business users and are not directed to children. Secro is not responsible for the privacy practices or content of third-party websites linked from its website.
Governing law
This policy is governed by the laws of the State of New York, without limiting mandatory privacy or data-protection rights under applicable Swiss, EU, UK, US state, or other law.
Changes and contact
Secro may update this policy and will revise the “Last updated” date when it does. Material changes may be communicated where required.
For privacy questions, data-subject requests, or privacy-related concerns, contact privacy@secro.io. For general inquiries, use the Secro contact page.