Privacy Notice
Who we are
This website is operated under the TriSec OS brand. TriSec OS is the controller of personal data collected through this website. You can reach us about any privacy matter through our contact page.
What we collect
- Early-access waitlist: email address, your consent choices (waitlist and Terms acknowledgement, plus optional product updates) with the version and time recorded, signup date and the page you joined from. New signups do not ask for your name, role or interests; earlier signups may hold the optional name, role, interest and feedback-call choice you gave at the time.
- Optional post-signup survey: if you answer it, your primary security role and the module you would like built next (up to 200 characters), or a note that you skipped it, with the time. It is linked to your waitlist entry by a one-way hash of a random token, never by asking for your email again. It is optional and used only to prioritise what we build; it is kept and deleted with your waitlist details.
- Contact form: name, email address, subject, message and the time you acknowledged this notice.
- Technical data: limited server and security logs (such as IP address and request details) created by our hosting providers when you use the site. To prevent form abuse we keep short-lived counters keyed by a one-way keyed hash of your IP address and email — never the IP address itself — deleted within about a day.
The interactive demo uses illustrative local data. Questions typed into the demo are not stored.
Why we use it and our legal bases
- Managing the waitlist and contacting you about access — your consent (GDPR Art. 6(1)(a)), and steps you have asked us to take before any beta arrangement (Art. 6(1)(b)).
- Product and news updates — only if you tick the optional box; based on your consent (Art. 6(1)(a)).
- Beta feedback calls — only for earlier signups who opted in; based on your consent.
- Responding to contact enquiries — steps you request (Art. 6(1)(b)), or our legitimate interest in answering messages sent to us (Art. 6(1)(f)).
- Security and abuse prevention — our legitimate interest in keeping the site and its forms secure (Art. 6(1)(f)).
We do not sell your data or use it for automated decision-making.
Who receives it
We use service providers acting on our behalf as processors: website hosting, database hosting and, where we email you, an email delivery provider. They may only process your data under our instructions and appropriate data protection terms.
International transfers
We aim to store form data in the European Union. Some providers may access or process data outside the EEA (for example, in the United States). Where that happens, we rely on safeguards recognised under the GDPR, such as an adequacy decision (including the EU–US Data Privacy Framework where the provider is certified) or the European Commission’s Standard Contractual Clauses.
How long we keep it
- Waitlist details: until the private beta access process ends or you withdraw consent or ask us to delete them, whichever is sooner. We review the list periodically and remove entries that are no longer needed.
- Product update consent: until you unsubscribe or withdraw consent.
- Contact messages: as long as needed to deal with your enquiry and any follow-up, then deleted, normally within 24 months.
- Security logs: for the short periods set by our hosting providers.
We keep a record of consent choices for as long as needed to show that consent was given.
Promotional email choices and opt-outs
Promotional emails (product news and offers) are only for people who ticked the optional product updates box. Messages about your waitlist place or account are essential service messages and are separate from promotional email.
When we send promotional email, each message will include a personal link to an email preferences page and a one-click unsubscribe that email apps can show. These links use a random identifier, not your email address. From that page you can unsubscribe from all promotional email in one step, or instead choose fewer emails (weekly or monthly), only product launches and offers, or a 30-day pause.
An unsubscribe takes effect immediately when we receive it, and we check it before every promotional message. We keep a record of your choices and opt-outs so we can respect them. If a message to you bounces or is reported as spam, we stop promotional email to that address. You can also ask us to stop through our contact page.
We have not yet started sending promotional email; these choices apply once we do.
Your rights
Subject to conditions in the GDPR, you have the right to:
- access your personal data;
- rectify inaccurate data;
- erasure;
- restrict processing;
- object to processing based on legitimate interests;
- data portability, where processing is based on consent or a contract and carried out by automated means;
- withdraw consent at any time, without affecting processing that took place before withdrawal.
To exercise any right, use our contact page. We may need to confirm your identity and will respond within one month, as required by law.
Complaints
You can complain to the Irish Data Protection Commission (www.dataprotection.ie) or to the supervisory authority where you live or work. We would appreciate the chance to address your concern first.
Do not submit sensitive information
Please do not send sensitive or confidential security data through our public forms or demo — for example credentials, unpatched vulnerability details, confidential findings, health data or other special category data.
Changes to this notice
We will update this notice when our practices change and show the new version and effective date above. Material changes affecting your consent will be communicated where appropriate.