Privacy Policy

Version 2026-10-23 · Samatech LLC, Samatech LLC, 1065 Lakes Blvd, Brunswick, GA 31525 · support@samatechdigital.com

What we collect

You: name, business email, language, and your sign-in settings. Your password is never stored — only a scrambled version (Argon2id hash).
Your organization: name, contact name and email, state. Optional: industry, number of employees, CAGE and UEI.
Your self-assessment: your answers, notes, tasks, and where you say your evidence is kept. We do not store your documents.
Security records: sign-ins, IP addresses and a log of important actions, used to protect accounts.
How you found us: the campaign tag in the link you used, if any (for example a workshop).

To run the tool and protect your account.
To send emails you need: email confirmation, password reset and security notices. We do not send marketing emails unless you agree to them separately.
To contact you about help with your assessment only if you checked "Samatech may contact me" or pressed "Request help from Samatech".
To count totals (for example, how many assessments were completed in Georgia) only if your organization agreed. These totals never show names, and any group smaller than five is hidden.

People in your organization.
A Samatech consultant only if your organization's owner gives access. Every visit is recorded and the owner can remove access at any time.
Our service providers, only to run the tool: Hetzner (servers in Ashburn, Virginia, USA) and Resend (email delivery).

We do not sell your information, share it for advertising, or use advertising trackers.

All connections use HTTPS encryption.
Each organization's data is kept separate inside the database itself, so one organization cannot see another's.
Owners and Samatech staff must use two-step sign-in. Everyone else can turn it on.
Your notes and explanations are encrypted inside the database.
Backups are made every day, encrypted, and stored on Samatech equipment in the United States.
Important actions (sign-ins, access changes, exports, deletions) are recorded in a log that cannot be edited.

While your account is active.
If an organization has no activity for 24 months, we email the owners; if there is still no activity 30 days later, we delete it.
When you delete an organization or account, it is removed after 30 days (you can cancel during that time). Copies in backups disappear within 35 more days.

Download all your organization's data (JSON) or a PDF report.
Correct your information in Settings.
Turn the optional permissions on or off at any time in Settings.
Delete your organization or account.
For anything else, write to support@samatechdigital.com. We answer within 30 days.

We use only two necessary cookies: one keeps you signed in, one remembers your language and protects forms. No analytics or advertising cookies.

This tool is for businesses and is not meant for children under 13.

We will post changes here with a new version number. If a change is important, we will also email you.