Privacy, in plain language

We sell security, so we hold ourselves to a higher standard with your information. This policy explains what we collect when you visit our site or use the Vernox platform, why we collect it, and the rights you have over it.

What we collect

Account details you give us (name, work email, company) so we can run your deployment and reach you. Platform telemetry (detection events, device health) so the service can protect you — this data stays inside your tenant and is never sold. Website analytics in aggregate so we can see which pages help visitors.

What we never do

We never sell personal information. We never read your encrypted customer data — keys are customer-held, so we cryptographically cannot. We never train shared models on identifiable customer content; model training uses aggregated, anonymized signals only.

Cookies

Our marketing site uses a small set of cookies for preferences and aggregate analytics. The platform console uses strictly-necessary session cookies. You can block analytics cookies in your browser without losing any functionality.

Your rights

Under GDPR, CCPA, and similar laws you may request access, correction, export, or deletion of your personal information. Write to privacy@vernox.security and we respond within 30 days. Platform customer data is deleted within 90 days of contract end, with certificates on request.

Questions

Contact our privacy team at the address above, or through the contact page. If we change this policy materially, we notify account owners by email first.