// legal

Privacy Policy

Last updated: April 7, 2026

1. Information We Collect

We collect information you provide directly — including email, name, phone number, and payment details — when you sign up, join the waitlist, or contribute via the /investors page. We also collect basic telemetry (IP address, user agent) for security and abuse prevention.

2. How We Use Information

  • To provide, maintain, and improve the Service
  • To process payments and contributions
  • To send transactional and security notifications
  • To detect and prevent fraud or abuse
  • To comply with legal obligations

3. Sharing

We do not sell your personal information. We share data only with the service providers required to operate ThreatCrush — including Supabase (database), CoinPay (payments), Stripe (card processing via CoinPay), and Telnyx (SMS) — and only as needed to deliver the Service.

4. Data Retention

We retain your information for as long as your account is active or as needed to comply with legal obligations and resolve disputes. You may request deletion at any time.

5. Security

We use industry-standard safeguards including TLS encryption in transit, encrypted storage at rest, and least-privilege access controls. No system is perfectly secure; we cannot guarantee absolute security.

6. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising cookies.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data. Contact us to exercise these rights.

8. Children

ThreatCrush is not directed at children under 13, and we do not knowingly collect personal information from them.

9. Changes

We may update this policy from time to time. Material changes will be announced on this page.

10. Contact

Privacy questions? Email privacy@threatcrush.com.