Privacy Policy

Scope

This policy covers personal information we handle as a controller: visitors to overwatchdata.ai and related sites, people who contact us or request a demo, recipients of our communications, and users of the Overwatch platform. Where Overwatch processes data on behalf of a customer under a services agreement, that agreement and any data processing addendum govern, and this policy does not override them.

Information we collect

Information you provide. Name, business email, phone number, company, job title, and the content of messages you send us when you request a demo, contact us, subscribe to our content, register for an event, or apply for a role. Platform users also provide account credentials and configuration settings.

Information collected automatically. IP address, browser and device type, operating system, referring pages, pages viewed, time on site, and similar log data, collected through cookies and comparable technologies described below. The platform records authentication and activity logs for security and support.

Information from other sources. Business contact information from publicly available professional sources, event partners, and data providers, and information from resellers or partners who refer you to us. We may combine this with information you provide.

Threat assessment requests. If you request a free threat assessment, you may give us your organization's domains and card BINs. We use this information only to prepare the assessment and discuss it with you, and we delete it 90 days after we receive it.

How we use information

We use personal information to provide, operate, secure, and support our websites and platform; respond to your requests; send service communications; send marketing communications you can opt out of at any time; analyze usage to improve our products; detect, prevent, and investigate fraud, abuse, and security incidents; comply with legal obligations; and enforce our terms.

Legal bases (EEA and UK)

Where the GDPR or UK GDPR applies, we rely on one or more of the following: performance of a contract with you or your organization; our legitimate interests in operating, securing, and marketing our business, provided those interests are not overridden by your rights; your consent, where we ask for it, which you may withdraw at any time; and compliance with legal obligations.

How we share information

We do not sell personal information and we do not share it for cross-context behavioral advertising. We share personal information only with: service providers that process it on our behalf under contract, such as hosting, analytics, customer relationship management, email delivery, and support tooling; professional advisors such as auditors, insurers, and legal counsel; authorities where required by law, regulation, legal process, or to protect rights, safety, or property; and a successor entity in connection with a merger, acquisition, financing, or sale of assets, subject to this policy. We may share information with your consent or at your direction.

Cookies and analytics

Our websites use only the cookies and similar storage they need to work. We don't use analytics or advertising cookies today. If we add them, we will ask for your consent first where the law requires it and update this policy. You can control cookies through your browser settings.

Where applicable law requires it, we treat a Global Privacy Control signal from your browser as a request to opt out of the sale or sharing of your personal information. We do not sell or share personal information as those terms are defined under California law.

Data retention

We keep personal information for as long as needed for the purposes described here, including to comply with legal, accounting, and reporting obligations and to resolve disputes. Retention periods depend on the type of information and the context in which it was collected. Platform data is retained according to the customer's services agreement.

Security

Overwatch maintains a security program audited under SOC 2 Type II, including access controls, encryption in transit and at rest, logging and monitoring, vendor review, and employee training. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

International transfers

Overwatch is based in the United States and may process information there and in other countries where we or our service providers operate. Where we transfer personal information from the EEA, we use the European Commission's Standard Contractual Clauses; from the UK, the UK International Data Transfer Addendum to those clauses; and from Switzerland, those clauses as adapted for Swiss law.

Your rights and choices

Depending on where you live, you may have the right to access the personal information we hold about you, correct it, delete it, receive a portable copy, restrict or object to certain processing, and withdraw consent. You may opt out of marketing email using the unsubscribe link in any message or by contacting us.

If you are a California resident, the CCPA/CPRA gives you rights to know, delete, correct, and to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined under California law. We will not discriminate against you for exercising your rights. You may designate an authorized agent to make requests on your behalf.

To exercise any right, contact us through our contact form (choose Privacy). We will verify your identity before responding. If you are in the EEA or UK, you also have the right to lodge a complaint with your local supervisory authority.

Threat intelligence data

Overwatch provides threat intelligence services. In delivering them, the platform collects and analyzes information from publicly available sources and from online spaces Overwatch can lawfully access, including criminal forums, marketplaces and messaging channels, some of which require an invitation. That information may incidentally include personal data about third parties who are not our customers or users. We process it for the purpose of detecting and preventing fraud, cybercrime, and related harms, on behalf of and at the direction of our customers, and in accordance with applicable law. We apply access controls and retention limits to this data and do not use it for marketing. Questions about this processing may be directed to the contact below.

Children

Our websites and platform are intended for business use and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

Third-party sites

Our sites may link to third-party websites and services. This policy does not apply to them, and we are not responsible for their practices.

Changes to this policy

We may update this policy from time to time. We will post the revised version here with an updated date and, where changes are material, provide additional notice such as email or a notice on the site.

Contact

Overwatch Data, Inc.
123 7th Ave, Unit 2, Brooklyn, NY 11215, United States
Questions, requests, or concerns about this policy:

Use our contact form and choose Privacy.