PLEASE READ THIS POLICY CAREFULLY TO UNDERSTAND HOW WE TREAT YOUR PERSONAL INFORMATION AS WELL AS YOUR CHOICES AND RIGHTS. IF YOU DO NOT AGREE WITH THE TERMS OF THIS POLICY, YOU SHOULD NOT ACCESS OR USE THE SITE.
THE SITE IS INTENDED FOR USERS LOCATED IN THE UNITED STATES, AND IT IS NOT INTENDED FOR USERS LOCATED IN OTHER COUNTRIES, INCLUDING THE EUROPEAN UNION AND THE EUROPEAN ECONOMIC AREA.
TripleKey, Inc. (also referred to herein as "we," "us," and "our") is committed to protecting the privacy and security of the personal information we collect, use, share, and otherwise process as part of our business. We also believe in transparency, and we are committed to informing you about how we treat the data we collect and process.
This Privacy Policy (the "Policy") describes our practices for the personal information for which we are a "data controller" under applicable law. This includes information collected when you visit our website, https://www.triplekey.com/ (the "Site"). It also includes information collected when you access or use our products and services, including FreeDAST, our free dynamic application security testing (DAST) tool (collectively, the "Services"). References to the Site in this Policy include the Services unless the context indicates otherwise.
We may collect the personal information described below:
| Category | Description |
|---|---|
| Contact Information | When you visit our Site, complete a contact form, book a demo, or otherwise contact us, we may receive your name, email address, phone number, or other contact details you choose to provide. |
| Business Information | When you seek services from us in the course of an inquiry, contract, demo, or customer registration, we collect business contact information, including your job title, company name, and company email address and phone number, as well as any other details you choose to provide. |
| Communications and Inquiries | If you submit a question or comment, or otherwise contact us, we receive any comments, content, questions, or other information that you choose to provide, in addition to your Contact Information. |
| Account Information | When you purchase or register for our services, we collect your Contact Information, Business Information, username, email address, and the password that you create, as well as a record of the products and services purchased. |
| Payment Information | When you purchase products or services from us, our third-party payment processor collects your credit card number, security code, and expiration date. We receive confirmation of your payment once it goes through, and that confirmation is linked to your transactions and other personal information. |
| Cookies and Similar Technologies | Our Site uses cookies and similar technologies. Please see the "Cookies and Similar Technologies" section of this Policy for more information. |
| Usage Data | When you visit the Site, we automatically collect information from your browser and device, including the date and time of your visit, location, Internet Protocol (IP) address or unique device identifier, domain server, browser type, access time, and data about which pages you visit. |
| FreeDAST Scan Data | When you use FreeDAST, we collect the target URLs, domains, and other web addresses you submit to be scanned, together with any scan configuration details you provide and the scan results and reports generated from those scans. We may also collect technical information associated with running a scan, such as the date and time of the scan and the IP address from which the request was made. |
What are first- and third-party cookies? A "cookie" is a small file created by a web server that can be stored on your device, if you allow it. Cookies may be used during a particular browsing session, called a "session" cookie, or during a future browsing session, called a "persistent" cookie. Session cookies are temporarily stored on your device and remain there until they expire at the end of your browsing session. Persistent cookies remain stored on your device until they expire or you delete them. Local shared objects, or "flash" cookies, may collect and store information about your preferences and navigation to, from, and on a website. First-party cookies are set by the website you are visiting and can only be read by that site. Third-party cookies are set by a party other than that website.
What are similar technologies? In addition to cookies, other data collection technologies may collect data as you navigate through and interact with a website. These technologies include Internet tags, web beacons, pixels, clear gifs, pixel tags, single-pixel gifs, log files, server logs, and similar navigational data collection tools. For example, web beacons are tiny graphics with unique identifiers that help us understand browsing activity. UTM codes are strings that may appear in a URL when you move from one web page or website to another. The string may represent information about your browsing, such as which advertisement, page, or publisher sent you to the receiving website.
What cookies and similar technologies are in use on the Site? The Site uses cookies and similar technologies to improve Site functionality, measure and track how you interact with the Site, perform analytics, market to you, track ad-driven activity, and tailor our communications with you.
For example:
We use Google Analytics to collect and process statistical data about the number of people using the Site and to better understand how they find and use the Site. The data collected includes data related to your device/browser, your IP address, and on-site activities to measure and report statistics about user interactions. The information stored is reduced to a random identifier. Any data collected is used in accordance with this Policy and Google's privacy policy. You may learn more about Google Analytics by visiting https://www.google.com/policies/privacy/partners/ and https://support.google.com/analytics/answer/6004245. You can learn more about Google's restrictions on data use by visiting the Google Privacy Policy at: https://www.google.com/policies/privacy. To opt-out of Google Analytics, visit https://tools.google.com/dlpage/gaoptout and install the opt-out browser add-on feature. For more details, visit the "Google Analytics opt-out browser add-on" page located at https://support.google.com/analytics/answer/181881?hl=en.
We use HubSpot to track visitors to the Site and to gather demographic information about our audiences. HubSpot keeps track of the pages you visit. For more information about HubSpot's Privacy Policy, see the HubSpot privacy policy.
We use RB2B to track visitors to the Site and how you interact with it and associate those activities with other personal information about you. Any data collected is used in accordance with this Policy and RB2B's privacy policy. For more information about RB2B's privacy policy, see https://www.rb2b.com/privacy-policy. You may opt out of receiving advertising from RB2B by visiting https://app.retention.com/optout.
We use Hotjar to track visitors to the Site and to gather and understand certain behaviors about our audiences. Any data collected is used in accordance with this Policy and Hotjar's privacy policy. For more information about Hotjar's privacy policy, see https://www.hotjar.com/legal/policies/privacy/.
Some third parties may use data collection technologies to collect information about you when you browse the Internet. We do not control these third parties' technologies or how they may be used. If you have questions about targeted content, you should contact the responsible party directly or consult their privacy policies.
Most web browsers are set by default to accept cookies. If you do not wish to receive cookies, you may set your browser to refuse all or some types of cookies or to alert you when cookies are being stored. These settings may affect your enjoyment of the Site's functionality. Adjusting the cookie settings may not fully delete all of the cookies that have already been created. To delete them, you should review your web browser settings after you have changed your cookie settings. The links below provide additional information about how to disable cookies or manage the cookie settings:
For more information about how to modify your browser settings to block or filter cookies, visit https://www.aboutcookies.org/. You may learn more about internet advertising practices and related consumer resources at https://youradchoices.com/control, https://thenai.org/about-online-advertising/faq, and https://www.networkadvertising.org/choices.
What is FreeDAST? FreeDAST is our free dynamic application security testing (DAST) tool. It allows you to submit a target URL, domain, or other web address and runs automated security tests against that target to help identify potential vulnerabilities, returning the results to you. FreeDAST is provided free of charge, and we do not collect payment information in connection with your use of FreeDAST.
What information do we collect through FreeDAST, and how do we use it? When you use FreeDAST, we collect the target URLs, domains, and web addresses you submit, along with any scan configuration details and the scan results and reports we generate. We use this information to perform the scans you request, to return results to you, and to operate, secure, maintain, troubleshoot, and improve FreeDAST and our other Services. We may also create and use de-identified or aggregated data derived from scans (for example, statistics about scan volume or the types of issues detected) to improve our Services, as described in this Policy.
Your responsibilities. You may only submit a target to FreeDAST that you own or that you are otherwise authorized to test. You are responsible for ensuring that your use of FreeDAST, and any information you submit, complies with applicable laws and with any agreements or terms that govern the target you scan. You should not submit personal information through FreeDAST except as necessary to run a scan, and scan results may reveal information about the target you submit, so you should handle those results accordingly.
How we share and retain FreeDAST data. We handle information collected through FreeDAST in accordance with this Policy, including the "How Do We Use and Share Your Personal Information?," "How Long Do We Keep Your Information?," and "How Do We Protect Your Information?" sections below. We may share this information with our service providers that help us operate FreeDAST, and as otherwise described in this Policy.
How Do We Use Your Personal Information? We may use your personal information for the purposes described below, grouped by purpose for readability:
We may share your personal information for the purposes described below:
| Category | Description |
|---|---|
| Affiliates | We may share your information with our subsidiaries and affiliates and with their respective officers, directors, employees, and agents. |
| Corporate Transactions | We may disclose your information in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of our organization or some or all of our assets. If we are acquired by or merged with another entity, your information may be transferred to the new owners. |
| Legal Obligations | We may disclose information in response to subpoenas, warrants, court orders, or other legal process, or to comply with relevant laws. We may also share information to establish or exercise legal rights or claims, defend against a legal claim, and investigate, prevent, or take action regarding possible illegal activities, suspected fraud, safety of person or property, or a violation of our contracts or terms. |
| Public | Some areas of our Site may offer forums or provide the opportunity for users to post comments or reviews in a public forum. Any information disclosed in these areas becomes public information, and you should exercise caution when deciding to disclose personal information. If you submit personal information in these areas, you do so at your own risk and acknowledge that the information will be publicly available. |
| Service Providers and Advisors | We may share information with service providers and professional advisors, such as accountants and attorneys, that need access to information to provide services on our behalf. |
| Third Parties | We may provide information about you to third parties that offer products and services specifically requested by you. We may also ask whether you would like us to share your information with other third parties, and we will only do so if you consent. |
| De-Identified and Aggregated Data | We may share aggregated information and anonymous or de-identified data that does not identify any specific individual, such as groupings of demographic data or user preferences, with third parties. |
We will keep your information for as long as is necessary to fulfill the purposes for which it was collected, to comply with our business requirements and legal obligations, to resolve disputes, to protect our assets, to operate our business, and to enforce our agreements.
We may delete your information if we believe it is incomplete, inaccurate, or that our continued storage of it is contrary to our objectives or legal obligations. When we delete data, it will be removed from our active servers and databases, but it may remain in our archives when it is not practical or possible to delete it.
We may retain and use anonymous, de-identified, or aggregated information for as long as is permitted under applicable law.
We have adopted security measures that are designed to protect the personal information under our control. From time to time, we review our security procedures and consider new technologies and methods.
No security system is perfect, and no data transmission is 100% secure. Although we strive to protect personal information, we cannot guarantee or warrant the security of any information transmitted to or from the Site. Your use of the Site is at your own risk, and we cannot guarantee that your data will remain secure in all circumstances.
If a data breach compromises your personal information, we will notify you and any applicable regulator when we are required to do so by applicable law.
Please use the "Contact Us" details provided at the end of this Policy to exercise your rights and choices under this Policy. We honor requests when we are required to do so under applicable law.
We may send you emails about our Site and services. If you do not want to continue receiving emails from us, you may opt-out by clicking the "unsubscribe" button at the bottom of our emails or by contacting us at privacy@triplekey.com. Please provide your name and contact information in your request, and we will respond to your request in accordance with applicable law.
Our goal is to keep your information accurate, current, and complete. If any of the information you have provided to us changes, please let us know via the "Contact Us" details at the end of this Policy. We are not responsible for any losses arising from any inaccurate, inauthentic, deficient, or incomplete personal data that you provide to us.
If you believe your rights relating to your personal information have been violated, please contact us via the "Contact Us" details provided at the end of this Policy.
You may have certain rights relating to your personal data under local data protection laws. We honor individuals' rights where required under, and in accordance with, applicable law, and, depending on the applicable laws, these rights may include the right to:
All requests should be sent to the contact details noted in the "Contact Us" section of this Policy. Your personal information may be processed in responding to these rights, including as needed to verify your identity.
Under California Civil Code § 1798.83, California residents who provide personal information in obtaining products or services for personal, family, or household use may be entitled to request and obtain from us, once each calendar year, information about the information we shared (if any) with other businesses for direct marketing uses. We do not currently share your personal information with third parties for those third parties' direct marketing purposes. Please be aware that not all information sharing is covered by the California's "Shine the Light" requirements, and only information regarding covered sharing (if any) will be included in our response. As a part of the California Online Privacy Protection Act, all users of our Site may make any changes to their information at any time by contacting us at privacy@triplekey.com.
Nevada residents may submit a verified request to us at privacy@triplekey.com to request that we not make any sale (as defined under Nevada law) of any covered information (as defined under Nevada law) that we have collected or will collect about you. Please provide your name and contact information in your request, and we will respond to your request in accordance with Nevada law.
This Policy only applies to the Site. It does not apply to any websites, applications, or services from third parties.
The Site may include links to, or content from, third parties. These links are to external resources and third parties that have their own privacy policies. It may not always be clear which links are to external, third-party resources. If you click on a third-party link, you will be redirected away from the Site. You can check the URL to confirm whether you have left the Site.
We cannot and do not (1) guarantee the privacy or security practices of third parties or any content provided by third parties; (2) control third parties' collection or use of your information; or (3) endorse any third-party information, products, services, applications, or websites.
Any information provided by you or collected from you by a third party will be governed by that party's privacy policy and terms of use. You should review their privacy policy and terms of use carefully.
Our Site and services are not directed to children under the age of 13, and we do not knowingly collect information from children under the age of 13. No one under the age of 13 may access, browse, or use the Site or provide any information to us. If we learn that we have collected or received personal information from a child under the age of 13 without a parent's or legal guardian's consent, we will take steps to stop collecting that information and to delete it. If you believe we have received information from a child under the age of 13, please contact us using the "Contact Us" details provided below.
For more information about Children's Online Privacy Protection Act, please visit the Federal Trade Commission's website at: https://www.ftc.gov/enforcement/rules/rulemaking-regulatory-reform-proceedings/childrens-online-privacy-protection-rule.
We may update this Policy from time to time. If we change this Policy, we will post the revised version on our Site. Any changes, updates, and modifications will be effective immediately upon posting. If we make material changes, we may also notify you through a notice on the Site's homepage, and/or we may send you an email regarding the updates.
You should read this Policy carefully before using the Site, and you should review it from time to time so that you are aware of its current terms. Your continued use of the Site after the "Last Updated" date will constitute your acceptance of and agreement to any changes and to our collection, use, and sharing of your information according to the then-current Policy. If you do not agree with this Policy, you should not use the Site.
For more information or if you have questions about this Policy, you may contact us using the information below: