// legal
Privacy Policy
Last updated: April 7, 2026
1. Information We Collect
We collect information you provide directly — including email, name, phone number, and payment details — when you sign up, join the waitlist, or contribute via the /investors page. We also collect basic telemetry (IP address, user agent) for security and abuse prevention.
2. How We Use Information
- To provide, maintain, and improve the Service
- To process payments and contributions
- To send transactional and security notifications
- To detect and prevent fraud or abuse
- To comply with legal obligations
3. Sharing
We do not sell your personal information. We share data only with the service providers required to operate ThreatCrush — including Supabase (database), CoinPay (payments), Stripe (card processing via CoinPay), and Telnyx (SMS) — and only as needed to deliver the Service.
4. Data Retention
We retain your information for as long as your account is active or as needed to comply with legal obligations and resolve disputes. You may request deletion at any time.
5. Security
We use industry-standard safeguards including TLS encryption in transit, encrypted storage at rest, and least-privilege access controls. No system is perfectly secure; we cannot guarantee absolute security.
6. Cookies
We use essential cookies for authentication and session management. We do not use third-party advertising cookies.
7. Your Rights
Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data. Contact us to exercise these rights.
8. Children
ThreatCrush is not directed at children under 13, and we do not knowingly collect personal information from them.
9. Changes
We may update this policy from time to time. Material changes will be announced on this page.
10. Contact
Privacy questions? Email privacy@threatcrush.com.