Introduction
Verusight ("we," "our," or "us") is committed to protecting the privacy of our users ("you" or "your"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our credential monitoring services.
Information We Collect
Information You Provide
- Account Information: Email address, company name, and domain name when you register for an account
- Payment Information: Billing details processed securely through our third-party payment processor (Polar). We do not store credit card numbers on our servers
- Domain Scan Requests: The corporate email domains you submit for credential exposure scanning
Information Collected Automatically
- Usage Data: Pages visited, features used, scan history, and interaction patterns
- Device Information: Browser type, operating system, IP address, and device identifiers
- Cookies: Session cookies for authentication and analytics cookies to improve our service
How We Use Your Information
We use the information we collect to:
- Provide and maintain our credential monitoring services
- Process domain scans and generate exposure reports
- Send security alerts when new credential exposures are detected
- Process payments and manage subscriptions
- Improve our service and develop new features
- Communicate service updates and security advisories
- Comply with legal obligations
Data We Monitor
Our service scans publicly available breach databases and stealer log collections to identify credential exposures associated with your corporate domain. We want to be clear about what this means:
- We do not hack or access any systems to obtain credential data
- We aggregate publicly available breach intelligence from known data sources
- Credential data in our reports originates from third-party breaches and info-stealer malware, not from our activities
- We do not store plaintext passwords in our systems — exposed credentials are partially redacted in reports
Data Sharing
We do not sell, trade, or rent your personal information. We may share data with:
- Service Providers: Payment processors, hosting providers, and analytics services that help us operate our platform
- Legal Requirements: When required by law, court order, or governmental authority
- Business Transfers: In connection with a merger, acquisition, or sale of assets
Data Security
We implement industry-standard security measures including:
- TLS encryption for all data in transit
- Encrypted storage for sensitive data at rest
- Regular security audits and penetration testing
- Access controls and authentication for all internal systems
- Automatic session expiration and secure token management
Data Retention
- Account Data: Retained for the duration of your account plus 30 days after deletion
- Scan Reports: Retained for 12 months from generation date
- Payment Records: Retained as required by applicable tax and financial regulations
- Usage Logs: Retained for 90 days for security and debugging purposes
Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Delete your personal data (subject to legal retention requirements)
- Export your data in a portable format
- Opt out of marketing communications
- Withdraw consent for data processing where consent is the legal basis
To exercise any of these rights, contact us at [email protected].
International Data Transfers
Our servers are located in the European Union. If you access our services from outside the EU, your data may be transferred to and processed in the EU in accordance with applicable data protection laws.
Children's Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date.
Contact Us
If you have questions about this Privacy Policy, please contact us at:
- Email: [email protected]
- Website: https://verusight.com