Privacy Policy

At VanatorX, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website (https://vanatorx.com/), interact with our platform, or use our services. As a cybersecurity startup, we prioritize data protection and comply with applicable laws, including GDPR and CCPA where relevant.

1. Introduction

This Privacy Policy applies to VanatorX and its affiliates. VanatorX is committed to protecting and respecting your personal information and privacy. This Policy outlines and is limited to the personal data processing practices carried out through the use of our website (vanatorx.com), our platform, and any other electronic communications networks by VanatorX. Please read this Policy carefully to understand how and why we collect, process, and use your information. By using our website and services, you agree to this Privacy Policy.

2. Collection of Your Personal Information

Personal Data is any information that directly or indirectly identifies a natural person. We will ask for your consent when we need information that personally identifies you (personal information) or allows us to contact you to provide a service or carry out a transaction that you have requested, such as receiving information about VanatorX products and services, ordering email newsletters, joining a limited-access site or service, or purchasing, downloading and/or registering VanatorX products.

The channels and types of personal information we may collect include:

• Information you directly provide to us: Such as full name, email address, company name, phone number (optional), country information when requesting demos, joining shortlist, or submitting inquiries.
• Usage Data: Automatically collected data such as IP address, browser type, operating system, pages visited, time and date of visits, and referral sources.
• Cookies and Tracking Technologies: We use cookies for session management, analytics, and to enhance user experience. You can manage cookie preferences through your browser settings.
• Platform Data: If you use our adversary emulation, detection testing, or other modules, we may collect anonymized usage metrics to improve functionality, without storing sensitive personal data unless explicitly provided.
• Information from other resources: We may also collect your personal information indirectly from third-party sources such as business partners, advertising networks, payment and delivery services as well as public records, such as social media platforms and industry associations. While we strive to ensure that these parties adhere to privacy standards consistent with ours, their use is governed by their own privacy policies.

3. Use and Control of Your Personal Information

We use collected information for the following purposes:

• To provide, maintain, and improve our platform and services, including adversary emulation, detection engineering, and threat intelligence features.
• To respond to your inquiries, provide product demos, or process requests.
• To send updates, newsletters, or marketing communications (with opt-out options).
• To analyze usage patterns and enhance security features.
• To comply with legal obligations and protect against misuse.

We will send you information according to the preferences submitted via our online forms and in accordance with any consent you have actively given, where applicable. You may change these preferences and/or withdraw your consent at any time. Except as otherwise described in this statement, the personal information you provide on the website will not be shared outside of VanatorX and its controlled subsidiaries and affiliates without your permission.

4. Cookies

Cookies are text files placed on users’ computers by visited websites. They can be used by web servers to identify and track users as they navigate different pages on a website and to identify users returning to a website.

We use cookies on our website vanatorx.com to determine visitor preferences, facilitate user requests, improve website experiences, keep our services secure, and conduct online behavioral advertising. For more information about cookie types and administration, please visit our Cookie Policy.

5. Security, Storage and Transfer of Your Personal Information

We implement technical and administrative measures to protect your personal data and prevent any unauthorized access, disclosure, use, and modification. We use industry-standard technologies, operational security methods, and cybersecurity products for the protection of collected personal data. We regularly review and validate the adequacy and effectiveness of our security controls to maintain a secure environment. Please note that no security measures are fully secure or impenetrable.

All systems related to VanatorX products are cloud-based. As a globally operated company, the destination where we store or transfer your personal information may be different from the country in which the data was collected. Regardless of the country that we transfer, store, or process your data, we will take reasonable steps to ensure that your data is treated securely and in accordance with this Policy.

6. Retention of Your Personal Information

VanatorX retains personal information only for the period necessary to fulfill the purposes for which they were collected and, thereafter, for a reasonable period to meet audit, contractual, or legal obligations or where we have a legitimate interest in retaining it. If there is no reason to keep certain personal data, it is destroyed in accordance with current legislation.

Adequate technical and administrative measures have been implemented within our Information Security Management System to ensure secure storage and destruction of personal information.

7. Sharing Your Information

We do not sell your personal information. We may share data with:

• Service Providers: Third-party vendors for hosting, analytics, or payment processing, bound by strict confidentiality agreements.
• Legal Requirements: If required by law, subpoena, or to protect our rights, users, or the public.
• Business Transfers: In the event of a merger, acquisition, or asset sale, with notice to affected users.

8. Your Rights and Choices

You have rights regarding your data, including to:

• Access, correct, or delete your personal information.
• Opt-out of marketing communications.
• Request data portability or object to processing.
• For EU residents, additional GDPR rights apply.

To exercise these rights, contact us at privacy@vanatorx.com.

9. Children’s Privacy

Our services are not intended for individuals under 18. We do not knowingly collect data from children.

10. International Data Transfers

Data may be transferred to and processed in countries outside your jurisdiction, with appropriate safeguards in place.

11. Changes to This Policy

We may update this policy periodically. Changes will be posted on this page with the updated effective date. Continued use constitutes acceptance.

12. Contact Us

For questions, contact: VanatorX. Email: privacy@vanatorx.com.

Last updated: January 1, 2025