Privacy Policy

1. Overview

ThreatFusionAI™ ("we", "us", "our") operates an AI-powered threat intelligence and cyber defense platform. This Privacy Policy explains what information we collect from users of our website and API, how we use it, and the choices you have. By creating an account or using our services, you agree to the practices described here.

2. Information We Collect

• Account information — username, email address, password (stored hashed), and profile details you provide (full name, phone number, occupation, biography).
• Usage data — API requests, search queries, IOC lookups, and platform activity, including timestamps and endpoint metadata, used for rate limiting, abuse prevention, and service improvement.
• Technical data — IP address, browser type, and device information collected automatically for security and analytics purposes.
• Submitted threat data — indicators of compromise (hashes, IPs, domains, URLs, emails) you submit for analysis.

3. How We Use Your Information

• To provide, operate, and maintain the platform and API.
• To authenticate accounts and enforce API rate limits and subscription plans.
• To detect, prevent, and investigate abuse, fraud, or security incidents.
• To communicate service updates, security alerts, and account-related notices.
• To improve our threat detection models and platform features.

4. Cookies & Similar Technologies

We use session cookies to keep you signed in and essential cookies required for core site functionality. We do not use third-party advertising trackers.

5. How We Share Information

We do not sell your personal information. We may share data with:

• Service providers who help us operate the platform (e.g. email delivery, hosting), under confidentiality obligations.
• Law enforcement or regulators when required by law or to protect the rights, property, or safety of ThreatFusionAI™, our users, or the public.
• Successors in the event of a merger, acquisition, or asset sale, with notice to affected users where required.

6. Data Retention

We retain account and usage data for as long as your account is active, or as needed to comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated personal data, subject to legal retention requirements.

7. Data Security

We apply industry-standard technical and organizational measures — including encryption in transit, access controls, and API key authentication — to protect your data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can update your profile directly from your account page, or contact us to exercise these rights.

9. International Data Transfers

Your information may be processed in countries other than your own. Where required, we take steps to ensure appropriate safeguards are in place for such transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the platform or by email. Continued use of the service after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please reach out via our Contact page.