LEGAL

Privacy Policy

Last updated: July 14, 2026

This policy explains what data GuardFox Security Systems ("GuardFox," "we," "us") collects, why, and what choices you have. It applies to guardfoxsecurity.com, our hosted demo, and the GuardFox platform itself.

Note: this is a plain-language policy describing our actual data practices. It is not a substitute for advice from qualified legal counsel — if you operate in a jurisdiction with specific requirements (GDPR, CCPA, HIPAA, etc.), have this reviewed by a lawyer before relying on it.

1. What we collect

Account & contact information. When you sign up, request a demo, or contact sales, we collect your name, work email, company name, and any message you send us.

Platform data you provide or generate. If you use the GuardFox product, we process the security data your organization sends into it — SIEM events, alert data, EDR endpoint telemetry (process, network, and file activity from agents you install), scan results, and incident/ticket records. This data belongs to you; we process it on your behalf to operate the platform.

Usage data. Basic technical logs (IP address, browser type, pages visited, timestamps) are recorded for security, debugging, and abuse prevention on both the website and the platform.

Demo & lead-capture data. The "Request a Demo" and "Try Live Demo" forms collect your name and work email so we can follow up or provision demo access.

2. Cookies & tracking

This website does not use third-party analytics, advertising, or ad-retargeting cookies. The platform (app.guardfoxsecurity.com) uses a functional session cookie to keep you signed in — nothing more.

3. How we use data

To provide, operate, and secure the GuardFox platform and website
To respond to demo requests, support inquiries, and sales conversations
To detect, investigate, and prevent fraud, abuse, or security incidents
To send service-related email (e.g. invite links, alert notifications, password resets) — see Section 5 for the provider we use

We do not sell your data, and we do not use your organization's security telemetry to train models or for any purpose other than operating the platform for you.

4. Data retention

Account and billing records are kept for as long as your account is active, plus a reasonable period afterward for legal and accounting purposes. Security telemetry (SIEM events, alerts) inside the platform is retained per your organization's configured retention window — 90 days by default, adjustable in Organization Settings — after which it is automatically and permanently deleted by a scheduled retention job.

5. Sub-processors & third parties

We use a small number of third-party services to operate GuardFox. We only send them the minimum data needed for their function:

Resend — transactional email delivery (invites, notifications, reports)
Google (Gemini API) — optional AI-assisted alert triage and analyst copilot, when configured
VirusTotal, NVD (NIST), CISA, abuse.ch — public threat-intelligence lookups (file hashes, CVEs, known-malicious indicators); these calls send indicators for lookup, not your organization's private data
Your cloud/database hosting provider — infrastructure hosting for the application and its database

6. Data security

We apply reasonable technical and organizational measures to protect your data, including encrypted connections (TLS) for data in transit, hashed credentials, role-based access control, and per-organization data isolation within the platform. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your rights & choices

Depending on your location, you may have the right to access, correct, export, or request deletion of your personal data. To exercise any of these rights, email us at hello@guardfoxsecurity.com and we will respond within a reasonable timeframe.

8. Children's privacy

GuardFox is a business product not directed at children, and we do not knowingly collect personal information from anyone under 16.

9. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of our site or platform after a change constitutes acceptance of the revised policy.

10. Contact us

Questions about this policy? Email hello@guardfoxsecurity.com.