Privacy Policy
Last updated: January 1, 2025
Overview
At ZainGuard, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our security platform and services. Please read this policy carefully to understand our practices regarding your data.
By accessing or using ZainGuard services, you acknowledge that you understand and agree to the collection and use of information in accordance with this Privacy Policy. This policy applies to information we collect through our platform, website, and services.
Information We Collect
We collect several types of information from and about users of our services:
Personal Information
- Name, email address, and contact information
- Company name and job title
- Billing and payment information (processed securely through our payment processor)
- Account credentials and authentication information
Security Data
- Security scan results and findings
- Infrastructure configuration data (cloud accounts, repositories)
- Compliance assessment results
- Incident reports and threat intelligence
Usage Information
- IP address and browser information
- Device information and operating system
- Usage patterns and feature interactions
- Log data and analytics data
How We Use Your Information
We use the information we collect for the following purposes:
- To provide, operate, and maintain our security services
- To detect, prevent, and respond to security threats
- To process your transactions and manage your subscription
- To send you important updates about our services
- To respond to your inquiries and provide customer support
- To improve and customize our services
- To conduct security research and analysis
- To comply with legal obligations
- To protect our rights and prevent fraud
How We Share Your Information
We may share your information in the following circumstances:
Service Providers
We may share your information with third-party service providers who perform services on our behalf, such as cloud hosting providers (AWS), payment processors (Stripe), and analytics providers. These providers are contractually obligated to protect your information.
Integration Partners
When you connect integrations (such as Prowler, TruffleHog, Sublime, or GitHub), we share only the necessary data to operate these integrations. We do not control these third-party services and their privacy practices.
Legal Requirements
We may disclose your information if required by law, court order, or legal process, or to protect our rights and the safety of our users.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring party.
Data Security
We implement industry-standard security measures to protect your information, including:
- Encryption of data in transit (TLS/SSL) and at rest
- Access controls and authentication mechanisms
- Regular security audits and vulnerability assessments
- Secure data centers with physical access controls
- Employee training on data protection and privacy
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
Data Retention
We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy, or as required by law. Retention periods may vary based on:
- The type of information collected
- The purpose for which it was collected
- Legal and regulatory requirements
- Your subscription plan and retention settings
You may request deletion of your account and associated data by contacting us at the email address below.
Your Rights and Choices
Depending on your location, you may have certain rights regarding your personal information:
- Access: Request access to your personal information
- Correction: Request correction of inaccurate information
- Deletion: Request deletion of your information
- Portability: Request a copy of your data in a machine-readable format
- Opt-out: Unsubscribe from marketing communications
- Do Not Sell: Opt-out of the sale of personal information (where applicable)
To exercise these rights, please contact us at privacy@zainguard.com
California Privacy Rights
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected, used, shared, or sold
- Right to delete personal information held by us or our service providers
- Right to opt-out of the sale of personal information
- Right to non-discrimination for exercising your privacy rights
International Data Transfers
ZainGuard is based in the United States. If you are located outside the United States, please be aware that information we collect may be transferred to and processed in the United States. By using our services, you consent to the transfer of information to the United States and other jurisdictions where we operate.
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to track activity on our platform and store certain information. Types of cookies we use include:
- Essential cookies: Required for the platform to function
- Analytics cookies: Help us understand how you use our platform
- Functionality cookies: Remember your preferences and settings
You can control cookies through your browser settings, but this may affect the functionality of our services.
Children's Privacy
Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.
Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: