Privacy Policy — Segurix

1. Data Controller

Segurix ("we", "us") is the controller of personal data processed through this site and the Segurix platform. For privacy questions or to exercise your rights, contact our Data Protection Officer at cesar.rodriguez.bravo@gmail.com.

2. What We Collect

Account data: name, work email, organization, role.
Authentication data: hashed credentials, session tokens.
Usage data: campaigns created, training progress, audit logs.
Technical data: IP address, user agent, timestamps for security.
Optional data: information you submit through demo/contact forms or the breach checker (queried email is not stored).

3. Legal Bases (GDPR Art. 6)

Contract: providing the platform you or your employer signed up for.
Legitimate interests: securing the service, preventing abuse, aggregate analytics.
Consent: non-essential cookies, marketing communications.
Legal obligation: tax, accounting, regulatory requests.

4. Retention

Account data is retained for the lifetime of the contract plus 12 months. Audit logs are kept for 24 months. Marketing leads are deleted 24 months after the last interaction. You may request earlier deletion at any time.

5. Your Rights

Under GDPR, UK GDPR, CCPA/CPRA, LGPD and Quebec Law 25 you have the right to: access, rectification, erasure, restriction, portability, objection, and to withdraw consent. EU/UK residents may lodge a complaint with their supervisory authority. California residents may opt out of "sale/share" of personal information; Segurix does not sell personal information.

To exercise any right, email cesar.rodriguez.bravo@gmail.com. We respond within 30 days.

6. International Transfers

Data may be processed in the EU and the United States. Where data leaves the EEA we rely on Standard Contractual Clauses and supplementary safeguards.

7. Cookies

See our Cookie Policy for details and to manage your preferences.

8. Changes

We will notify material changes via email or in-app banner and update the date at the top of this page.