Privacy policy
Draft for legal review. This page hasn't been reviewed by CGM's lawyer yet. Items in [square brackets] are still to be filled in.
Last updated November 9, 2026 (draft)
This policy covers CGM Workspace and its apps, provided by CGM Consulting Group [legal entity name and address].
What we collect
- Your account: name, email address, company, role, and the app privileges your company gives you. If you set up two-factor sign-in, your authenticator is registered with our sign-in provider.
- What your company puts in: compliance tasks, notes, evidence files and links, messages, procedures, procedure runs, recorded values and photos.
- Records of changes: who changed what and when (the activity log and procedure history). These can't be edited.
- Email records: which automated emails were sent to which address and when, so nobody gets one twice, and your email preferences.
- Technical records: errors (where and what went wrong, with your account id but not your email), kept 90 days; and request counters used to limit abuse, keyed by a one-way scrambled form of your network address, kept up to one day. We don't keep IP addresses.
We don't use advertising, tracking or analytics tools.
Why we use it
- To sign you in and show you only what your company's subscriptions and your role allow.
- To send the emails you've asked for or that your company's agreement includes: sign-in links, the weekly Standards Watch digest, task reminders and digests. Each one has an unsubscribe link or a setting on your Account page.
- To bill your company (through Stripe) and to keep the service secure and working.
Who else handles it
Only these service providers, each only to run the service:
- Supabase: database, sign-in and file storage. [Region.]
- Vercel: hosting.
- Resend: sending email.
- Stripe: payments (self-serve subscriptions).
- Microsoft: "Sign in with Microsoft" and your company's SharePoint evidence folder, once your company connects them.
- Anthropic: the weekly Standards Watch drafting job reads public NERC and FERC pages with Anthropic's Claude. No customer data is sent.
- Google Fonts: the pages load their typefaces from Google, which sees your network address when it serves them.
We don't sell personal information.
Cookies and storage in your browser
- Sign-in cookies keep you signed in. A small cookie records your last activity so CGM staff accounts sign out after a period of inactivity.
- Your browser remembers a few preferences on your device only: Standards Watch filters, unsent message drafts, and the high-contrast setting in Smart Procedures.
How long we keep it
Account and company data is kept while your company uses CGM Workspace. Compliance evidence is kept long enough to cover each task's full cycle, since some NERC tasks recur only every 6 to 12 years. [Final retention and deletion periods, after legal review.] Records of changes are kept as long as the records they describe.
Security
Each company's data is walled off in the database itself. Traffic is encrypted. CGM staff can be required to use two-factor sign-in, and are signed out after inactivity. Evidence files are private and opened through short-lived links.
Your choices
You can see and change your name and email preferences on your Account page. To get a copy of your data, correct it, or have it deleted, contact your company admin or [privacy contact email]. Some records must be kept because your company relies on them as compliance evidence.
Changes
We'll post changes here and tell company admins about significant ones.