Privacy Policy
How EQ Risk Solutions collects, uses, protects, and manages information entrusted to us.
1. Introduction
EQ Risk Solutions, LLC ("EQ Risk Solutions," "EQRS," "we," "our," or "us") respects the privacy of our customers and is committed to protecting the confidentiality, integrity, and security of the information entrusted to us. This Privacy Policy explains how we collect, use, disclose, retain, and safeguard information when you visit our website, communicate with us, or use our software and related services.
EQ Risk Solutions provides cloud-based compliance reporting software for banks, credit unions, and other regulated financial institutions. Our platform assists organizations in generating reports that support Bank Secrecy Act (BSA), Anti-Money Laundering (AML), Office of Foreign Assets Control (OFAC), and related compliance programs. While our software is designed to support regulatory compliance efforts, it does not provide legal advice, perform compliance audits, certify compliance with applicable laws, or guarantee regulatory outcomes.
This Privacy Policy applies to information collected through the EQ Risk Solutions website, client portal, and any web-based software or services operated under the eqrisksolutions.com domain, including subdomains such as site.eqrisksolutions.com and other *.eqrisksolutions.com services that reference this Privacy Policy.
By accessing or using our website or services, you acknowledge that you have read and understand this Privacy Policy. If you are using the Services on behalf of an organization, you represent that you are authorized to accept this Privacy Policy on behalf of that organization.
We built EQ Risk Solutions for financial institutions that expect professionalism, transparency, and trust. We do not sell customer information, we do not use customer data for advertising, and we do not use customer-uploaded information to train artificial intelligence or machine learning models. Customer information is processed solely to provide the services requested by our customers and to operate our business responsibly.
2. Scope of this Privacy Policy
This Privacy Policy applies to information collected by EQ Risk Solutions through our public website, customer portal, web-based software, customer support interactions, and other services that reference this Privacy Policy.
Specifically, this Privacy Policy applies to:
- The EQ Risk Solutions website and related subdomains operating under *.eqrisksolutions.com.
- Customer accounts created for authorized users of our Services.
- Information submitted through contact forms, sales inquiries, demonstrations, and customer support requests.
- Documents and information voluntarily uploaded by customers for report generation and related processing.
- Operational and security information generated while using our Services.
This Privacy Policy does not apply to third-party websites, products, or services that may be linked from our website. Those services maintain their own privacy practices and policies, which we encourage you to review before providing any personal information.
3. Information We Collect
We collect only the information reasonably necessary to provide our Services, communicate with customers, maintain secure operations, comply with applicable laws, and improve the reliability of our platform.
The categories of information we collect include:
| Category | Examples | Purpose |
|---|---|---|
| Account Information | Name, business email address, telephone number, organization, job title, login credentials. | Account creation, authentication, customer support, service administration. |
| Customer Communications | Contact forms, email correspondence, support tickets, product inquiries, demonstrations. | Responding to requests and providing customer support. |
| Usage Information | Browser type, IP address, operating system, pages visited, session activity, timestamps, authentication logs. | Security monitoring, troubleshooting, platform performance, and service reliability. |
| Customer Uploaded Information | Documents, spreadsheets, reports, and other files uploaded by authorized users for report generation. | Producing requested reports and supporting customer workflows. |
Account Information
When an organization becomes a customer, authorized users may be assigned individual accounts. These accounts typically include identifying information such as names, business email addresses, company affiliation, and authentication credentials. We use this information to administer customer accounts, verify user identities, provide customer support, and communicate important service-related information.
Customer Uploaded Information
Customers may upload documents and related information to enable EQ Risk Solutions to generate requested compliance reports. Uploaded information is processed solely for the purpose of providing the Services requested by the customer.
Unless otherwise agreed in writing, uploaded documents are retained only for the period reasonably necessary to generate requested reports, maintain operational integrity, investigate technical issues, satisfy applicable legal obligations, enforce our agreements, or fulfill other legitimate business purposes. Once those purposes have been satisfied, uploaded information is securely deleted or otherwise disposed of in accordance with our internal data retention practices.
We do not access, review, or use customer-uploaded information except as necessary to provide the Services, respond to customer requests, maintain system security, investigate technical issues, or comply with applicable law. We do not use customer information to build commercial datasets, develop unrelated products, deliver advertising, or train artificial intelligence or machine learning models.
Automatically Collected Information
Like most cloud-based software providers, we automatically collect limited technical information when users interact with our Services. This information may include browser type, operating system, device characteristics, IP address, login timestamps, session identifiers, pages visited, and similar diagnostic information necessary to operate and secure the platform.
This technical information is used to authenticate users, detect suspicious activity, diagnose technical problems, improve platform performance, and maintain the security and availability of our Services.
4. How We Use Information
EQ Risk Solutions uses information only for legitimate business purposes related to providing, maintaining, securing, and improving our Services. We collect only the information reasonably necessary to fulfill our contractual obligations, support our customers, and operate our business responsibly.
Depending on the circumstances, we may use information to:
- Create and administer customer accounts.
- Authenticate authorized users and maintain account security.
- Process Customer Uploaded Information to generate requested compliance reports.
- Provide technical support and respond to customer inquiries.
- Monitor system performance, availability, and operational health.
- Detect, investigate, prevent, and respond to fraud, abuse, unauthorized access, and other security incidents.
- Maintain audit logs and operational records necessary for security and troubleshooting.
- Comply with applicable laws, regulations, lawful requests, court orders, or other legal obligations.
- Communicate important administrative notices regarding customer accounts or the Services.
We do not use customer information for unrelated commercial purposes or in ways that are inconsistent with this Privacy Policy.
5. Customer Data Ownership
Customer Uploaded Information remains the property of the customer or the customer's licensors. Nothing in this Privacy Policy transfers ownership of Customer Uploaded Information to EQ Risk Solutions.
By uploading information to the Services, customers grant EQ Risk Solutions a limited, non-exclusive right to host, process, store, transmit, and otherwise use that information solely as necessary to provide the Services requested by the customer.
Customers are responsible for ensuring they have all necessary rights, permissions, and legal authority to upload information into the Services and to authorize EQ Risk Solutions to process that information on their behalf.
EQ Risk Solutions does not purchase, acquire ownership of, monetize, or otherwise claim proprietary rights in Customer Uploaded Information. We process customer information solely to provide the Services described in our agreements with our customers.
6. Data Controller and Data Processor Roles
The role of EQ Risk Solutions depends on the type of information being processed.
| Information | EQ Risk Solutions' Role |
|---|---|
| Customer account information, billing information, contact requests, and website administration. | Data Controller. |
| Customer Uploaded Information processed within the Services. | Service Provider / Data Processor acting on behalf of the customer organization. |
When processing Customer Uploaded Information, EQ Risk Solutions acts only on instructions provided by the customer through normal use of the Services. Customers determine what information is uploaded, how long it should remain available, who may access it within their organization, and whether the information should ultimately be deleted.
Customers remain responsible for the legality, quality, accuracy, and appropriateness of all information submitted through the Services, including obtaining any required notices, permissions, authorizations, or consents necessary under applicable law.
7. Cookies and Similar Technologies
Our website currently uses only cookies and similar technologies that are necessary for the operation, security, and functionality of our website and customer portal.
Essential cookies may be used to:
- Maintain authenticated user sessions.
- Protect against unauthorized access and malicious activity.
- Remember basic user preferences.
- Improve website reliability and functionality.
We do not currently use advertising cookies, behavioral advertising technologies, third-party marketing pixels, or cross-site tracking technologies.
If EQ Risk Solutions introduces analytics technologies such as Google Analytics in the future, we will update this Privacy Policy and our Cookie Policy before those technologies become active.
8. Analytics
EQ Risk Solutions does not currently use Google Analytics or similar third-party analytics services to measure visitor behavior on our public website or within the Services.
As our platform evolves, we may implement privacy-conscious analytics tools to better understand website performance, identify usability improvements, and improve the reliability of our Services. Should analytics services be enabled in the future, we will update this Privacy Policy, our Cookie Policy, and any applicable consent mechanisms before those technologies become active.
If implemented, analytics information may include browser type, device characteristics, approximate geographic region, referring pages, session duration, pages viewed, and other aggregated usage statistics. Analytics information will be used solely to improve our Services and will not be used for advertising, profiling individuals, or making automated decisions about users.
9. Disclosure of Information
EQ Risk Solutions does not sell, rent, license, or otherwise disclose personal information to third parties for their own marketing or commercial purposes.
We may disclose information only when reasonably necessary to operate our business, provide the Services, comply with applicable law, or protect our legal rights.
Service Providers
We may share information with carefully selected third-party service providers that assist us in operating the Services. These providers perform functions such as cloud hosting, infrastructure management, email delivery, security monitoring, customer support, and other operational services. These providers receive only the information reasonably necessary to perform their services and are contractually required to protect the confidentiality and security of that information.
Legal Requirements
We may disclose information when we believe disclosure is required to comply with applicable law, legal process, court orders, governmental requests, or regulatory obligations, or when necessary to protect the rights, property, safety, or security of EQ Risk Solutions, our customers, or others.
Corporate Transactions
Information may be transferred as part of a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar business transaction. Any successor organization will remain subject to obligations substantially consistent with this Privacy Policy unless customers are notified otherwise.
With Customer Direction
We may disclose information when expressly authorized or instructed by the customer, including when customers integrate third-party services with the EQ Risk Solutions platform or request that reports be delivered to designated recipients.
10. Cloud Infrastructure and Hosting
EQ Risk Solutions currently operates its Services using Microsoft Azure cloud infrastructure. Microsoft Azure provides enterprise-grade hosting facilities, physical security, networking, redundancy, and infrastructure services that support the operation of our platform.
Customer information may be processed or stored within Microsoft Azure solely for the purpose of providing the Services requested by our customers. We configure and manage our Azure environment using security practices appropriate to the size, nature, and operational requirements of our business.
While Microsoft Azure provides the underlying cloud infrastructure, EQ Risk Solutions remains responsible for managing our applications, customer accounts, access controls, and the information under our control.
Cloud security is a shared responsibility. EQ Risk Solutions is responsible for securing our applications, services, and customer environments, while Microsoft is responsible for securing the underlying Azure infrastructure that supports those services.
11. Security of Information
Protecting customer information is fundamental to the services we provide. We maintain administrative, technical, and physical safeguards designed to protect information from unauthorized access, disclosure, alteration, misuse, or destruction.
Our security program is designed to support the confidentiality, integrity, and availability of the Services while remaining appropriate to the size and nature of our business. As our platform evolves, our security practices will continue to evolve alongside it.
Depending on the circumstances, these safeguards may include:
- Encryption of data transmitted between users and our Services using industry-standard Transport Layer Security (TLS).
- Authentication controls that restrict access to authorized users.
- Role-based administrative access where appropriate.
- System logging and operational monitoring.
- Routine software maintenance and security updates.
- Physical and environmental protections provided by our cloud infrastructure providers.
While we employ commercially reasonable safeguards, no method of electronic transmission, cloud storage, or information processing can be guaranteed to be completely secure. Accordingly, we cannot guarantee absolute security.
12. Security Incident Response
EQ Risk Solutions maintains procedures for identifying, investigating, containing, and responding to suspected security incidents affecting our Services.
If we become aware of a confirmed security incident involving customer information under our control, we will investigate the incident, take reasonable steps to contain and remediate the issue, and notify affected customers when notification is required by applicable law or our contractual obligations.
Because investigations take time, information provided during an incident may be preliminary and subject to change as additional facts become available.
Customers also play an important role in protecting their information. Customers are responsible for maintaining the confidentiality of their account credentials, protecting devices used to access the Services, assigning appropriate permissions within their organizations, and promptly notifying EQ Risk Solutions of any suspected unauthorized access.
13. Data Retention
We retain information only for as long as reasonably necessary to provide the Services, fulfill contractual obligations, maintain security, comply with applicable legal requirements, resolve disputes, and protect the legitimate interests of EQ Risk Solutions and our customers.
| Information Type | General Retention Practice |
|---|---|
| Customer Account Information | Retained while an account remains active and for a reasonable period thereafter for legitimate business and legal purposes. |
| Customer Uploaded Information | Retained only for the period reasonably necessary to provide requested processing, maintain operational integrity, investigate technical issues, satisfy legal obligations, or enforce our agreements. |
| Operational Logs | Retained for security monitoring, troubleshooting, fraud prevention, and operational purposes in accordance with internal practices. |
When information is no longer required, it is securely deleted, anonymized, or otherwise disposed of using procedures appropriate to the nature of the information.
14. California Privacy Rights
EQ Risk Solutions is headquartered in California and conducts business in accordance with applicable California privacy laws.
Where applicable, California residents may have certain rights regarding personal information collected directly from them, including the ability to request access to, correction of, or deletion of certain personal information, subject to applicable legal exceptions.
Because EQ Risk Solutions primarily provides business-to-business software to regulated financial institutions, much of the information processed within the Services is controlled by our customers rather than by EQ Risk Solutions. Requests relating to Customer Uploaded Information should generally be directed to the organization that originally collected the information.
15. Sale or Sharing of Personal Information
EQ Risk Solutions does not sell personal information.
We do not share personal information for cross-context behavioral advertising, targeted advertising, or similar marketing activities.
We do not use customer information to create advertising profiles, develop commercial marketing databases, or monetize customer information through third-party advertising networks.
Customer information exists to provide the Services our customers request. We believe information entrusted to us should remain under the control of the customer and should never become a product in itself.