Privacy Policy

Current as of December 01, 2023

Your trust is important to us, and we want to ensure that your personal information is protected. This Privacy Policy explains how we collect and use your personal information in relation to Blacksmith InfoSec products, services, events, and websites or applications that link to this Policy (together, the “Blacksmith InfoSec Products”). It also describes how you can control or exercise your rights related to your personal information.

1. Personal Information We Collect

We process information about you while providing the Blacksmith InfoSec Products. Below, we outline the kinds of information we collect.

Information You Give to Us

We collect information about you when you provide it to us directly.

• Your Blacksmith InfoSec account. We collect information about you when you submit it through the Blacksmith InfoSec Products, including when you create an account with us. This may include your name, email address, company name, postal address , and phone number. This may also include your payment information when you purchase any of the Blacksmith InfoSec Products.
• Support. We collect information you provide to us when you open a support request or otherwise communicate with us (such as through third-party social-media sites). This may include your name, email address, title, company, and any other information you provide in your request.
• Other information submitted by you. We collect information about you that you submit to us through the Blacksmith InfoSec Products, such as when you participate in any interactive features of the Blacksmith InfoSec Products or fill out a form on one of our websites. This information may include your name, email address, and title.

Information We Collect Automatically

We automatically collect information about you when you access or use the Blacksmith InfoSec Products.

• Your use of the Blacksmith InfoSec Products. We collect information about how you use the Blacksmith InfoSec Products, such as your session date, time, and duration; the pages you viewed; and the page you visited before navigating to the products or websites.
• Device information. We collect information about your computer or device when you access any of the Blacksmith InfoSec Products, such as the type of browser you use, your IP address, and the location of your device.
• Cookies and similar technologies. We use cookies and similar technologies (like web beacons and pixels) to collect information about your interactions with the Blacksmith InfoSec Products, including identifiers, usage data, session information, links clicked, pages visited, and mouse movements.

Information We Collect from Other Sources

We may also obtain information about you from other sources.

• Other services linked to your account. We may collect information about you when you link your Blacksmith InfoSec account with other services. For example, if you create or log into your Blacksmith InfoSec account using your Google Apps or Microsoft credentials via single sign-on, we will have access to certain information such as your name and email address, as authorized in your Google Apps profile settings.
• Our affiliates. We may receive information about you from one of our affiliates if you interact with them directly, for example your Managed Service Provider (MSP).
• Third parties. We may receive information about you from third parties that provide business information to us or from public sources. This information may include things like your name, title, email address, phone number, and social-media profile. We may combine this information with information we collect through other means described above.
• Blacksmith’s Google OpenID use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

2.How We Use Personal Information

We use information about you for the following purposes.

• To provide the Blacksmith InfoSec Products. We use information about you to provide you with access to the Blacksmith InfoSec Products, including to create and manage your Blacksmith InfoSec accounts, process transactions with you, and send you invoices.
• For research and to improve the Blacksmith InfoSec Products. We use information about you, including website analytics, to improve the Blacksmith InfoSec Products, including to monitor and analyze trends, usage, and other activities in connection with the Blacksmith InfoSec Products so that we can continually improve them. We may also link or combine information about you with information we get from others to help understand your needs and provide you with better service.
• To communicate with you. We use information about you to communicate with you, including to send you technical notices, product updates, security alerts, support communications, and administrative messages about the Blacksmith InfoSec Products (including important changes to the Blacksmith InfoSec Products). This also includes sending you information about your account and data, such as when we update our terms or when we materially change how we use your data.
• For security. We may use information about you to maintain and increase the security of the Blacksmith InfoSec Products, including to detect, investigate, and prevent fraud and other illegal activities from occurring, as well as to protect the rights and property of Blacksmith InfoSec, our customers, and third parties.
• To market and promote the Blacksmith InfoSec Products. We use information about you to send you promotional messages and to show you advertisements. This may also include using information about you to create more personalized advertising and suggest Blacksmith InfoSec Products that may be of interest to you. We may also use information about you to facilitate contests, sweepstakes, and promotions, and to process and deliver your entries and rewards.
• To comply with legal obligations. We may use information about you to comply with our legal requirements. For example, we may process and retain information about your payments to us for tax and accounting purposes.
• With your consent. Finally, we use information about you for any other purposes that you have consented to. For example, if you agree to be named as a Featured Customer, we might post information about you on one of our public websites.

3.Sale of Personal Data

Blacksmith InfoSec does not sell your personal data to any third parties.

4.How We Share Personal Information

We may share your personal information as follows.

• Service providers. We use third-party service providers who work on our behalf, including to provide hosting services, authentication services, cybersecurity and anti-fraud services, and advertising,  which may require us to share your personal information.
• For legal reasons. In rare cases, we may share information about you in response to a request for information if we believe disclosure is permitted or required by an applicable law, regulation, or legal process, including to comply with a subpoena or applicable court order. Further, we may share your personal information with any person to whom disclosure is necessary to enable us to enforce our rights under this Privacy Policy or under any agreement we enter with you or to protect the rights, property, or safety of Blacksmith InfoSec or third parties.
• Business transfers. We may share your information in connection with, or during negotiations of, any merger, sale of Blacksmith InfoSec assets, financing, or acquisition of all or a portion of our business by another company.
• Affiliates. We may share your personal information with our affiliate companies who may act for us for any of the purposes set out in this Privacy Policy, including our current and future parents, affiliates, subsidiaries, and other companies under common control and ownership.
• Marketing and analytics. We may share your personal information with analytics and search-engine providers that assist us in the improvement and optimization of our websites.. 
• Social Media. Some of our websites may contain social-sharing widgets or features that let you share information you find on our websites on third-party sites, including, for example, Twitter, LinkedIn, and YouTube. By doing so, you authorize us to facilitate this sharing of information, and you understand that the use of shared information will be governed by the social media provider’s privacy notice.
• Consent. We may share your personal information with your consent or at your direction.

5.Security

The security of your personal information is incredibly important to us. We have implemented and we continually maintain a variety of technical and organizational measures to protect your personal information from unauthorized access and against unlawful processing, accidental loss, destruction, and damage.

6.Retention

We only keep your personal information for as long as necessary to fulfill the purposes we collected it for, after which it will be deleted or archived unless we are required to keep it to comply with our legal obligations or for another legitimate and lawful purpose. To determine the appropriate retention period for personal information, we consider several factors, including:

• the terms of our agreements with you;
• our legitimate interests (as outlined in this Privacy Policy);
• our legal obligations; and
• the amount and nature of your personal information.

In some cases, we may anonymize your personal information so that you are no longer identifiable, in which case we may use the resulting information without further notice to you.

7.Children

The Blacksmith InfoSec Products are not directed to individuals under the age of 16, and we do not knowingly collect or sell the personal information of children under 16.

8.Your Choices

You have choices about how Blacksmith InfoSec collects and uses your personal information.

• Account information. Our customers may access, update, or change personal information they have provided to us by logging into the relevant Blacksmith InfoSec application or emailing us at support@blacksmithinfosec.com. Subject to the terms of their agreements with us, customers may deactivate their accounts by emailing us at support@blacksmithinfosec.com, but we may retain certain personal information as necessary to comply with our legal obligations or for legitimate business purposes, such as to resolve disputes or enforce our agreements. We may also retain cached or archived copies of personal information for a certain period.
• Advertising. You may opt out of receiving promotional emails from Blacksmith InfoSec by following the instructions in those emails or by emailing marketing@blacksmithinfosec.com. If you opt out of receiving promotional communications, we may still send you non-promotional emails, such as those about your account or our ongoing business relationship. If you would like to opt out of receiving promotional phone calls, please email us at marketing@blacksmithingosec.com.

9. No Sale of Personal Information

We do not sell or share (for the purpose of cross-context behavioral advertising) your personal information, as those terms are defined under the CCPA.

10.Changes to this Privacy Policy

We may occasionally update this Privacy Policy. The date at the top of this Privacy Policy indicates when it was last revised. Any changes will become effective when we post the revised Privacy Policy on this page.

11.Contact Us

If you have questions or concerns about this Privacy Policy, privacy@blacksmithinfosec.com.