Snapshot 49479
Normalized text
Scripts and page chrome removed; this is what change detection compares.
We use essential cookies to make our site work. With your consent, we may also use non-essential cookies to improve user experience and analyze website traffic. By clicking “Accept,” you agree to our website's cookie use as described in our Cookie Policy. You can change your cookie settings at any time by clicking “Preferences.” Privacy Policy Revision Date: September 1, 2026 What changed? We revised our Privacy Notice to expand our discussion of how we collect personal information and your data protection rights. INTRODUCTION This Privacy Notice is effective as of the “Last Updated” date above. We may change this Privacy Notice from time to time. If we make changes, then we will notify you by revising the “Last Updated” date. Where required by law, we will provide you with additional notice, such as sending you a notification. AttackIQ, Inc. (“AttackIQ”) is a Delaware corporation. AttackIQ provides a suite of breach and attack simulation solutions, including AttackIQ SaaS and AttackIQ On Premises Software. In this Privacy Notice we refer to AttackIQ SaaS and AttackIQ On Premises Software as the AttackIQ “Solution.” We maintain websites to market the AttackIQ Solution at www.attackiq.com and other websites controlled by us, and we manage the AttackIQ Academy at www.academy.attackiq.com. In this Privacy Notice we refer to all of our websites as the “Website”. The AttackIQ Solution is a business-to-business offering used by businesses worldwide (our “Clients”). When we process personal information in the course of providing our Solution to our Clients, we do so pursuant our agreements with our Clients, not this Privacy Notice. AttackIQ knows you care about how your personal information is used and shared, and we take your privacy seriously. We gather information about persons who access our Website, request information about AttackIQ and our Solution, attend our webinars, attend our marketing events, attend our hiring events, submit job applications, register for membership with the AttackIQ Academy or use other services that link to this Privacy Notice (collectively, our “Services”). We also gather information about persons who may be interested in our Services, but have not interacted directly with AttackIQ, through third-party data analytics providers. Our Privacy Notice helps you understand what information we collect and receive and how we use it and the choices you have. This Privacy Notice does not cover the practices of companies we don’t own or control. In this Privacy Notice, personal information or “PI” means information that identifies, relates to or describes a particular person and information that is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular person. INFORMATION WE COLLECT AND WHY WE COLLECT IT When you access or use our Services, we collect a variety of information from and about you, your devices and your interactions with our Services. This information includes the following. PI YOU PROVIDE TO US We may ask you to provide PI voluntarily when you express an interest in obtaining information about our Solution through the Website or through our sales teams, request to contact sales, use our “Contact Us” Website form or similar Website features, sign up for an event or webinar, inquire about job opportunities or participate in surveys. The types of PI we may collect from you may include your name, title or job level, employer, and contact details such as your mailing address, email address, and telephone number. We collect this PI for these business purposes: to send you direct marketing materials about the AttackIQ Services including marketing offers and resources, emails, newsletters and company updates to personalize the marketing emails we send you so they are more relevant to you, based on your Website interactions to respond to sales inquiries, demo requests and technical support questions you submit about the AttackIQ Services and to communicate with you about job opportunities with us. AttackIQ Academy. The AttackIQ Academy is open to the public, but individuals must choose to register to become members of the AttackIQ Academy. It is maintained by AttackIQ at www.academy.attackiq.com. All content displayed in the AttackIQ Academy is created and published by AttackIQ. Registered members cannot post content to the AttackIQ Academy. However, registered members can choose to upload a profile picture to the AttackIQ Academy which is visible only to the member and AttackIQ Academy administrator. If you choose to join the AttackIQ Academy then we ask you to provide the following PI voluntarily: your name, email address, telephone number, country of residence, employer, job title and ASC2 association of cyber security professionals member number. We use this AttackIQ Academy PI for the business purpose of managing registration with the AttackIQ Academy, communicating with the registered member and tracking AttackIQ Academy courses completed by the registered member. If an AttackIQ Academy member shares his or her ASC2 number with us, and if the member then completes an AttackIQ Academy course, then we share this course completion information with the association of cyber security professionals. An AttackIQ Academy member who completes courses or receives badges from AttackIQ Academy may choose to share this information on his or her own social media accounts. If so, AttackIQ may choose to amplify these posts by resharing the posts on AttackIQ’s own social media channels, for the purpose of promoting the AttackIQ Academy. PI WE COLLECT AUTOMATICALLY We automatically collect two categories of information: internet activity information and information collected by tracking technologies. Internet Activity Information. If you access or use our Services then we collect information about you which includes identifiers and some technical information, such as: the type of device you are using the IP address of your device other unique device identification numbers the type of browser you useyour browser language your location at a high level (country or city or zip code) We also collect internet activity about your activity on our Services and your interactions with our communications, such as: access times the website page you visited before navigating to our Services the Website pages you view the links you click keystrokes and mouse movements how you interact with our marketing emails If we combine your name, email address or phone number with the device information we collect automatically, then we will treat the combined information as your PI. We collect this PI for various business purposes, including: for business analytics, to understand how you use our Services to verify, maintain and improve the quality of our Services to detect and prevent activities on our Website that are illegal or that do not comply with our Website policy to detect and prevent security incidents, such as automated website clicks by bots Information Collected by Cookies and Similar Tracking Technologies. Cookies are small pieces of text sent to your browser by the Website when you visit. They help the Website remember information about your visit, which can both make it easier to visit the Website again and make the Website more useful to you. Similar technologies, including unique identifiers used to identify an app or device, pixel tags, and local storage, can perform the same functions. We use cookies to record that you have visited a particular Website page or clicked on a particular AttackIQ advertisement and to remember your preferences. We also use cookies in order to analyze marketing trends, administer the Website, tracking visitors’ movements around the Website, and to gather demographic information about our AttackIQ community base as a whole. All modern Internet browsers allow you to manage how cookies are set and used as you are browsing, and to clear cookies and browsing data. Also, your browser may have settings letting you manage cookies on a site-by-site basis. For example, Google Chrome’s settings at chrome://settings/cookies allow you to delete existing cookies, allow or block all cookies, and set cookie preferences for any site, including our Website. Google Analytics provides an add-on at https://tools.google.com/dlpage/gaoptout to provide website visitors the ability to prevent their data from being used by Google Analytics. Some internet browsers may be configured to send “Do Not Track” signals to the online Services that you visit. We currently do not respond to “Do Not Track” or similar signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com. PI THAT WE OBTAIN FROM THIRD-PARTY SOURCES. We may obtain marketing leads from third parties. We collect this PI only after we have confirmed that the third parties are legally permitted to disclose your PI to us. For example, we may collect information from B2B data enrichment and intelligence tools such as first and last name, email address, job title, company name and other contact information about persons likely to be interested in our Services. We use this information to market the AttackIQ Solution to you. We may obtain job candidate leads from third party recruiters that are the first and last name, email address and other contact information about persons likely to have the professional credentials we require. We use job candidate leads to market our open positions to the candidates and process applications. If the candidate is successful, then we use the candidate data to administer the employment or independent contractor relationship. If you share information when you interact with us on third party social media platforms, such as LinkedIn, we may collect this information. We use this information to market the AttackIQ Solution to you. TARGETED ADVERTISING AND ANALYTICS We engage others to provide analytics services, serve advertisements, and perform related services across the web and in mobile applications. These entities may use cookies and similar technologies to collect information about your use of our Services, including your IP address, web browser and mobile network information, pages viewed, time spent on pages, and links clicked. These entities may use this information to deliver AttackIQ advertising targeted to your interests on other companies’ websites or mobile apps, to analyze and track data, to determine the popularity of certain content, and to better understand your interactions with AttackIQ advertising. You can also learn more about interest-based ads, or opt out of having your web browsing information used for behavioral advertising purposes by companies that participate in the Digital Advertising Alliance, by visiting www.aboutads.info/choices. USE OF INFORMATION In general, we will use the personal information we collect from you only for the purposes described in this Privacy Notice or for purposes that we explain to you at the time we collect your personal information. However, we may also use your personal information for other purposes that are not incompatible with the purposes we have disclosed to you (such as archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes) if and where this is permitted by applicable data protection laws. If you have questions or need further information concerning the legal basis on which we collect and use your personal information, please contact us using the contact details provided under the “Contact Us” below. DISCLOSURE OF INFORMATION We may disclose personal information to third parties for a variety of business or commercial purposes. This includes disclosure: to our third-party services providers who provide data processing for our operational and commercial business purposes described in this Privacy Notice. For example, we share PI of Website visitors with our website hosting provider to support the operation of our Website. to any competent law enforcement body, regulatory body, government agency, court or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person; to an actual or potential buyer (and its agents and advisers) in connection with any actual or proposed purchase, merger or acquisition of any part of our business, provided that we inform the buyer it must use your personal information only for the purposes disclosed in this Privacy Notice; to any other person with your consent to the disclosure; and as otherwise allowed by applicable data protection law. Our third party service providers have access to your personal information only to perform certain tasks on our behalf and are obligated not to disclose or use it for any other purpose. We may disclose information in other circumstances after giving you notice and obtaining any required consent. If we need your consent to use your PI under applicable data protection laws then we will ask for your consent at that time and will clearly explain the purpose of our use of your PI. Once given, you may revoke your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent. ADDITIONAL RIGHTS OF INDIVIDUALS Data Protection Rights AttackIQ supports your right to exercise your data protection rights under applicable laws based on where you reside. For example, the California Consumer Privacy Act (“CCPA”) grants rights to California residents regarding their personal information, including: the right to know what categories and specific pieces of personal information have been collected, used, shared or sold (if any); the right to know the purposes for which the information is used; the right to delete personal information, where not excepted by law; and the right to opt-out of the sale of their personal information. To exercise any of these rights, please contact us as described below in the “Contact Us” section. For example, if you are located in the European Economic Area (“EEA”), the United Kingdom or Switzerland then you have the right to request access to or deletion or correction or your PI. In addition, you have the right to object to certain processing or request that AttackIQ restrict certain processing. To exercise any of these rights, please contact us as described below in the “Contact Us” section. If you have a concern about our processing that we are not able to resolve then you have the right to lodge a complain with the Data Protection Authority where you reside. Here are links to assist you in contacting your Data Protection Authority. EEA residents: https://edpb.europa.eu/about-edpb/board/members_en UK residents: https://ico.org.uk/global/contact-us Swiss residents: https://www.edoeb.admin.ch/de/kontakt Our legal basis under the GDPR for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it. However, we will normally collect personal information from you only where we have your consent to do so, where we need the personal information to perform a contract with you, or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. Managing Communications You may manage your receipt of marketing and non-transactional communications by clicking on the “unsubscribe” link located on the bottom of our marketing emails or by contacting AttackIQ using the information below. Data Transfer We transfer PI of residents of non-United States regions, including residents of the EEA, the United Kingdom and Switzerland, to the United States. At this time the United States has been designated a non-adequate country for the purposes of compliance with the EU General Data Protection Regulation (“GDPR”). We rely on data transfer safeguards that are appropriate under the GDPR such as the standard contractual clauses as approved by the European Commission (Article 46 GDPR). We monitor developments and guidance from both European and United States regulatory authorities and will update this disclosure as needed. Data Retention We retain PI for as long as necessary to carry out the purposes for which we originally collected it and for other business purposes explained in the Privacy Notice. Data Security We take steps to ensure that your information is treated securely and in accordance with this Privacy Notice. Unfortunately, the Internet cannot be guaranteed to be 100% secure, and we cannot ensure or warrant the security of any information you provide to us. We do not accept liability for unintentional disclosure. By using the Services or providing personal information to us, you agree that we may communicate with you electronically regarding security, privacy and administrative issues relating to your use of the Services. If we learn of a security system’s breach, we may attempt to notify you electronically by making a notice available to you through the Services or sending an e-mail to you. Children Our Website and Services relate to the cyber security industry and are intended for use by adults ages 18 or older. We do not knowingly collect any personal information from minors, and minors should not use our Website or our Services at any time. Contact Us If you have any questions about our privacy practices or this Privacy Notice, or if you wish to submit a request to exercise your rights as detailed in this Privacy Notice, please write to us at: AttackIQ, Inc. Attn: Privacy Officer 171 Main Street, Suite 656 Los Altos, California 94002 Or, contact us by email at [email protected]. We prefer email. We value your privacy and we will not discriminate against you if you choose to exercise your privacy rights.