Data Use Policy

1. Introduction

At Identity Defense 247, we believe that transparency is foundational to security. This Data Use Policy explicitly outlines how we interact with, process, and protect the data entrusted to us by our clients. Our core directive is to provide enterprise-grade threat intelligence without compromising the privacy of your organization or its employees.

2. Zero Data Sale Commitment

We are a cybersecurity and threat intelligence platform, not a data broker. Identity Defense 247 strictly does not sell, rent, lease, or monetize your corporate data, employee email addresses, scan histories, or threat intelligence results to any third parties.

3. Communication & Employee Privacy

Our relationship is exclusively with the designated account administrator(s) of your organization. To ensure strict communication boundaries, we adhere to the following rules:

• Administrator Contact: We will use the email address of the registered account administrator to send system alerts, billing information, newsletters, and promotional updates regarding Identity Defense 247 services.
• Strict Non-Interference: We will absolutely never contact or solicit any other employees, staff members, or email addresses discovered during our domain scans. Monitored employee emails are processed solely for the purpose of cross-referencing threat intelligence databases and are never added to marketing lists.

4. Analytics and Advertising Pixels

To improve our public-facing website and market our services effectively to potential administrators, we utilize standard digital advertising technologies. These include:

• Tracking Pixels: We use tracking and targeting pixels provided by third-party advertising platforms (such as Facebook/Meta and Google).
• Scope of Tracking: These tracking mechanisms are deployed on our public marketing pages and the initial registration flows. They are used to measure the effectiveness of our advertising campaigns and to deliver relevant ads to users who have visited our site.
• Exclusion of Sensitive Data: Advertising pixels are strictly firewalled from your secure, authenticated dashboard and do not have access to any of your organization's scanned domains, employee emails, or security audit results.

5. Data Processing for Security Scans

When you submit a domain or a VIP external email for a security audit, that data is securely transmitted to our proprietary threat intelligence indices. We process this data transiently to identify potential exposures and return the results directly to your secure dashboard. We do not store plaintext passwords from breaches; we only aggregate metadata (e.g., breach names and data classes) to inform your remediation efforts.