Privacy Policy

Introduction

DirectiveIO, Inc. ("DRCTV," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our DRCTV platform, available through Microsoft Azure Marketplace and our website at directive.cloud (collectively, the "Service").

Please read this Privacy Policy carefully. By accessing or using our Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

Information We Collect

Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Register for an account or subscribe to our Service
• Request a demo or contact our sales team
• Submit support tickets or contact customer service
• Sign up for our newsletters or marketing communications
• Participate in surveys, promotions, or other activities

This information may include:

• Name, email address, and phone number
• Company name, job title, and business contact information
• Billing and payment information
• Azure subscription and tenant identifiers
• Any other information you choose to provide

Automatically Collected Information

When you access our Service, we automatically collect certain information, including:

• Device and browser information (type, operating system, unique identifiers)
• IP address and general location data
• Usage data (pages visited, features used, time spent)
• Referral URLs and search terms
• Cookies and similar tracking technologies

Azure and Infrastructure Data

To provide our automation and optimization services, we may access and process:

• Azure resource configurations and metadata
• Performance metrics and telemetry data
• Log data and monitoring information
• Cost and billing data from your Azure environment
• Security and compliance status information

Note: We do not access, store, or process the actual content of your applications, databases, or customer data hosted in your Azure environment unless explicitly required for a specific feature you have enabled.

How We Use Your Information

We use the information we collect for the following purposes:

Service Delivery

• Provide, operate, and maintain the DRCTV platform
• Process transactions and manage your subscription
• Generate automated recommendations and optimization suggestions
• Create and manage Infrastructure as Code (IaC) change proposals
• Provide customer support and respond to inquiries

Improvement and Development

• Analyze usage patterns to improve our Service
• Develop new features and functionality
• Train and improve our AI/ML models (using aggregated, anonymized data only)
• Conduct research and analytics

Communications

• Send administrative communications (service updates, security alerts)
• Provide marketing communications (with your consent)
• Respond to your comments, questions, and requests

Security and Compliance

• Detect, prevent, and address technical issues
• Protect against fraudulent or illegal activity
• Comply with legal obligations
• Enforce our terms and policies

Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers

We may share information with third-party service providers who perform services on our behalf, including cloud hosting (Microsoft Azure), payment processing, analytics, and customer support. These providers are contractually obligated to protect your information.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change.

Legal Requirements

We may disclose information if required by law, regulation, legal process, or governmental request, or to protect our rights, privacy, safety, or property.

With Your Consent

We may share information with third parties when you have given us explicit consent to do so.

Data Retention

We retain your information for as long as necessary to provide our Service and fulfill the purposes described in this Privacy Policy. Specifically:

• Account Data: Retained for the duration of your account and for a reasonable period thereafter
• Usage Data: Typically retained for 24 months in identifiable form
• Azure Telemetry: Retained according to your configured retention policies
• Support Records: Retained for 5 years for quality assurance and legal compliance

You may request deletion of your personal information at any time, subject to legal retention requirements.

Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
• Multi-factor authentication and role-based access controls
• Regular security assessments and penetration testing
• SOC 2 Type II compliance (in progress)
• Microsoft Azure security certifications and compliance
• Employee security training and background checks

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

Access and Portability

You can request a copy of your personal information in a structured, machine-readable format.

Correction

You can request that we correct inaccurate or incomplete personal information.

Deletion

You can request deletion of your personal information, subject to certain exceptions.

Opt-Out

You can opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails or contacting us directly.

Cookie Preferences

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of our Service.

To exercise any of these rights, please contact us at privacy@directive.cloud.

International Data Transfers

Our Service is hosted on Microsoft Azure and may process data in the United States and other countries. If you are located outside the United States, your information may be transferred to, stored, and processed in a country with different data protection laws.

We rely on appropriate safeguards for international transfers, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Microsoft's Data Protection Addendum and compliance certifications
• Adequacy decisions where applicable

GDPR Compliance (EEA Users)

For users in the European Economic Area (EEA), we process personal data under the following legal bases:

• Contract: Processing necessary to perform our contract with you
• Legitimate Interests: Processing for our legitimate business interests (improving our Service, security)
• Consent: Processing based on your explicit consent (marketing communications)
• Legal Obligation: Processing required by applicable law

You have the right to lodge a complaint with your local data protection authority if you believe we have violated your rights under GDPR.

CCPA Compliance (California Residents)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request information about the categories and specific pieces of personal information we collect
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the "sale" of personal information (we do not sell personal information)
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise your CCPA rights, contact us at privacy@directive.cloud or call us at the number provided below.

Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For significant changes, we may also send you an email notification.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.