Who we are
WarRoom is a cyber crisis management platform made by Progist ("we", "us"). This notice explains how we handle personal data when you sign up for and use a WarRoom free trial. For the data described here, Progist is the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (DPDP Act).
Your company decides what it puts into its trial workspace, including details about other people such as exercise participants. Your company is responsible for having the right to share that data with us. We use it only to provide the trial.
What we collect
When you sign up
- Your name, work email, company name, job title and country.
- If you choose to give them: phone number, company size, and what you want to test.
- Your consent choices, the version of this notice, and any campaign or partner tags in the link you used.
- Your IP address and browser user agent.
During the trial
- Your account details. Your password is stored only as a secure hash.
- The scenarios, exercises, results and reports your company creates.
- Names and designations of guest participants that your company enters or that guests enter when they join an exercise.
- Activity logs: what is created, changed or run in the trial workspace, by whom, when, and from which IP address.
Progist staff can see trial activity. We use it to support your trial and to follow up with your company about the trial and about continuing as a customer.
Why we use it
(a) Providing the trial: required
We use your data to check and verify your work email, set up and run your trial workspace, add colleagues from your company domain, send trial emails (the verification link, notices when someone joins, reminders before the trial ends, and the end-of-trial notice), support you, prevent abuse, and contact you about your trial. You can't start a trial without agreeing to this purpose.
(b) Marketing contact: optional
Only if you tick the separate box on the signup form, Progist may contact you about WarRoom products and events beyond your trial. Leaving it unticked does not affect your trial.
Who we share it with
- Progist staff who run, support and sell WarRoom.
- Other members of your company's trial workspace, who can see its content.
- Service providers who host WarRoom, deliver email and run AI features for us, under contract and on our instructions. When you use AI scenario generation, the text you give that feature is sent to an AI model provider to produce the result.
- Authorities, where the law requires it.
We do not sell personal data.
How long we keep it
- Signups that are never verified are deleted 30 days after signup.
- When a trial ends without your company becoming a customer, the trial workspace and its data (accounts, scenarios, exercises, participant details, uploaded files and activity logs) are deleted 60 days after the trial end date. We keep only the company name, email domain and trial dates, so the same company can't start another trial.
- If your company becomes a customer, the trial data is kept under your customer agreement.
Your rights
Under the DPDP Act you can ask us to:
- give you a summary of your personal data and how we use it;
- correct, complete or update it;
- erase it, unless we must keep it by law;
- stop using it on the basis of your consent. You can withdraw consent at any time. Withdrawing purpose (a) ends your trial access. Withdrawing purpose (b) only stops marketing contact.
To use these rights or raise a grievance, write to us through the contact page and mention "Trial privacy request" with the work email you signed up with. If you are not satisfied with our response, you can complain to the Data Protection Board of India.
Security
We protect your data with reasonable security safeguards, including access controls, encrypted connections and activity logging.
Changes to this notice
If we change this notice, we will publish a new version here with a new version number and date. If a change affects what you agreed to, we will ask for your consent again.