Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account data: When you create an account or purchase a tool, we collect your name, email address, and payment information via our payment processor (Stripe). We do not store card numbers.
• Form submissions: If you contact us through our contact form or sign up for a mailing list, we collect the information you provide (typically name and email).
• Tool inputs: Our security tools may process data you submit (URLs, domains, email addresses, file uploads) to perform the requested scans or analysis. This data is processed transiently and is not persistently stored beyond the session.

1.2 Automatically Collected Information

• Usage data: We collect basic analytics including pages visited, tools used, referral source, and general location (country-level). This data is anonymized and aggregated.
• Log data: Server logs may capture IP addresses, browser type, and pages accessed. Logs are retained for 30 days for security and debugging purposes.
• Cookies: We use minimal essential cookies for site functionality. We do not use advertising or tracking cookies.

2. How We Use Your Information

• To deliver the security tools and services you request
• To process payments and send transactional emails (receipts, login links, security alerts)
• To send product updates and security intelligence emails if you've opted in to our mailing list
• To respond to your inquiries and provide customer support
• To detect and prevent abuse, fraud, or unauthorized access to our tools
• To comply with legal obligations

3. Data Sharing and Disclosure

We do not sell your personal information. We share data only in the following circumstances:

• Service providers: We use Stripe for payment processing. Their privacy policy applies to payment data. We also use Cloudflare for site delivery and DNS management.
• Legal compliance: We may disclose information if required by law, court order, or government request, or if we believe disclosure is necessary to prevent illegal activity or protect our rights.
• Business transfers: In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of that transaction.

4. Data Security

We use HTTPS everywhere (TLS 1.2+), Cloudflare for DDoS protection, and principle-of-least-privilege access controls on our internal systems. No system is 100% immune from breach, but we follow industry-standard practices to protect your data.

For security tool users: any data you submit to our scanners is processed in isolated environments and is not shared with third parties. Scan results are not retained beyond the session unless you explicitly save them in your account.

5. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to certain legal retention requirements)
• Unsubscribe from marketing emails at any time using the link in each email
• Object to processing of your data for certain purposes

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

6. GDPR Compliance (EEA Users)

If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation. Our legal basis for processing your data is:

• Performance of contract: To deliver the services you request
• Legitimate interests: To secure our tools, prevent fraud, and improve our services
• Consent: For marketing communications (which you can withdraw at any time)

We do not conduct automated decision-making or profiling that produces legal effects.

7. Third-Party Links

Our site may contain links to third-party sites (e.g., ClawHub, Stripe, GitHub). We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies before providing any personal information.

8. Children's Privacy

Our services are not directed to individuals under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us immediately at [email protected].

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated policy on this page and update the "Last updated" date. We encourage you to review this policy periodically.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

EdgeIQ Labs
Email: [email protected]
Domain: edgeiqlabs.com