FAQ

Instantly. Every PrivOptic product is a digital download — you'll get a download link at checkout and by email the moment payment is confirmed. Nothing ships, and there's no waiting period. If a link ever fails or gets lost, contact us with your order number and we'll re-issue it at no charge.

It depends on the product, and each product page lists its exact contents. Our applications are self-contained files that run in your browser — no installation, no server, no account. Toolkits and starter packs include structured worksheets and templates. The HIPAA for Telehealth training course ships in four formats in one download: a standalone HTML course plus ready-to-upload SCORM 1.2, SCORM 2004, and cmi5 packages, with an integration guide.

The demos are real, working slices of each product running on sample data — not videos or screenshots. The full versions add the complete feature set listed in each demo's "In the full version" section: full question banks, additional modules and departments, report generation, templates, and export capabilities.

Because delivery is instant and automatic, there's no window between purchase and delivery in which an order can be cancelled. If you bought the wrong product entirely, contact us within 48 hours — before downloading — and we'll work with you in good faith, which may include exchanging your license for the product you intended. See our Refund Policy for details.

Your purchase grants a perpetual license to use, modify, and deploy the product within one organization. Everyone inside that organization can use it — there's no per-seat pricing and no subscription. What you can't do is share it outside your organization, resell it, or republish it.

Yes — one license per client organization. If you're rolling a product out across several clients, buy a license for each, or contact us about multi-organization licensing. Deploying one purchase across multiple client organizations isn't permitted under the standard license.

Yes, within your licensed organization. The applications and templates are built to be adapted — organization name, branding, question sets, thresholds, and content are all editable, and products that support rebranding say so in their documentation. The one limit: customization doesn't create a right to redistribute the result outside your organization or offer it as a competing product.

You own a perpetual license to use it; PrivOptic retains the underlying intellectual property. In practice this changes nothing about your day-to-day use — it only means you can't resell or republish the product itself.

No — and not as a policy choice, but by architecture. Our products run entirely in your environment: your browser, your intranet, your LMS, your spreadsheet software. Assessments, DSAR records, incident details, learner progress — none of it is transmitted to us. We have no servers receiving it, no accounts, and no telemetry in the products. We are not a processor of your data. This is covered in Section 3 of our Privacy Policy.

The products themselves create no ongoing data flow to us — they're static files you run yourself, more like a document than a SaaS. The only data we process is your purchase information (name, email, billing) through our Shopify storefront. Many privacy teams find that materially simplifies their internal review, though your own vendor assessment process is of course yours to run — we'd expect nothing less.

No. We don't sell personal information and we don't share it for cross-context behavioral advertising. Our full practices are in the Privacy Policy.

No and no — and we'd be suspicious of any vendor who claims otherwise. Our products are practitioner-built tools: they give you sound structure, the right questions, and defensible documentation. Compliance depends on your facts, your jurisdiction, and your judgment (and, where it matters, your counsel's). No tool — ours or anyone's — can guarantee compliance with any law. See Section 2 of our Terms of Service.

We update products from time to time, but honestly: a purchase buys the current version, and doesn't automatically include future versions unless the product page says so. Every product is fully editable precisely so you can adapt it as your legal landscape shifts — that's a feature, not a workaround.

It varies by product and each product page is specific. Across the catalog you'll find coverage of GDPR and UK GDPR (RoPA, DSARs, DPIAs), CCPA/CPRA and other US state laws (DSARs, assessments), the ePrivacy consent rules (cookie auditing), and HIPAA's Privacy, Security, and Breach Notification Rules (compliance suite and training).

Digital goods can't be returned, so all sales are final — with one real exception: if a product is materially defective, tell us within 14 days and we'll repair or replace it, and refund you if we can't make it work. "I changed my mind" or "it doesn't work with a platform the product page never claimed" don't qualify. Full details are in our Refund, Return & Cancellation Policy.

For instantly delivered digital content, EU and UK law allows the withdrawal right to be waived when you expressly consent to immediate delivery — which checkout does. Your statutory conformity remedies for genuinely defective digital content remain intact regardless.

Download re-issuance any time, and defect support as described above. The products are deliberately self-contained — each ships with its own documentation — so most buyers never need us. For questions, licensing arrangements, or a tool you wish existed, reach us through the contact page; include your order number for anything purchase-related.

A modern browser (Chrome, Edge, Firefox, or Safari). No server, no installation, no account. The applications work offline once loaded. The training course additionally works with any SCORM 1.2, SCORM 2004, or cmi5-compatible LMS — Cornerstone, Docebo, TalentLMS, Moodle, SuccessFactors, Litmos, and most others.