Privacy Policy
This Privacy Policy explains how Secriq LLC, doing business as secriq ("secriq," "we," "us," or "our"), collects, uses, shares and protects personal information when you visit secriq.com or use our security awareness and human risk management services (together, the "Service"). It should be read with our Terms of Service and Cookie Policy.
1. Information we collect
Information you give us
- Contact details: name, work email address, phone number, company name and job title, when you request a report, join a waitlist, subscribe to our newsletter, contact us or sign up.
- Account and billing details: information needed to set up your account and process payment. Card details are handled by our payment processor, and we do not store full card numbers.
- Customer data: if you are a customer, the names, work email addresses, roles and group assignments of the people you enroll in the program (your "users").
Information created by using the Service
- Training and simulation results: lessons completed, scores, whether a simulated phishing email was opened, clicked or reported, and similar activity.
- Exposure findings: if you use dark web monitoring or our free human risk report, the work email addresses you provide and whether they appear in known breaches or credential leaks.
Information collected automatically
- Device and usage data: IP address, browser type, device type, pages visited and time on site.
- Approximate location: derived from your IP address. We do not collect precise GPS location.
- Cookies and similar technologies: described in our Cookie Policy.
2. How we use information
- Provide, operate, secure and support the Service, including delivering training and sending simulated phishing emails on your behalf.
- Produce reports and risk scores for your organization.
- Process payments and manage accounts.
- Respond to your questions and requests.
- Send newsletters and marketing messages, where you have asked for them or where the law allows. You can unsubscribe at any time.
- Understand how people use our site and improve it.
- Detect fraud and abuse, enforce our terms, and meet legal obligations.
3. How we share information
We do not sell your personal information, and we do not rent it. We share it only as follows:
- Service providers that help us run the Service, such as the platform that delivers our training and simulations, hosting, email delivery, form and newsletter tools, payment processing and analytics. They may use the information only to provide services to us.
- Your organization. If you are a user enrolled by an employer or other organization, we share your training and simulation results with that organization.
- Legal and safety reasons, when required by law, court order or to protect rights, safety and security.
- Business transfers, such as a merger, acquisition or sale of assets, with notice where required.
4. Cookies and tracking
We use essential cookies to make the site work and, with your consent where required, analytics cookies to understand how it is used. See our Cookie Policy for details and how to change your choices. Some browsers send Do Not Track or Global Privacy Control signals. Where the law requires, we treat opt-out preference signals as a request to opt out.
5. Data retention
- Customer data is kept while your account is active. After an account ends, we delete or return it within 30 days, unless the law requires us to keep it longer.
- Contact and marketing records are kept until you ask us to delete them or unsubscribe, and for a reasonable time afterward to honor your request.
- Billing records are kept for as long as tax, accounting and legal rules require.
6. Security
We use reasonable administrative, technical and organizational safeguards to protect personal information. No system is completely secure, so we cannot guarantee absolute security. If we learn of a breach affecting your information, we will notify you as the law requires.
7. Your rights and choices
Depending on where you live, you may have the right to know what personal information we hold about you, to access and correct it, to delete it, to receive a copy, and to opt out of the sale or sharing of personal information or of targeted advertising. We do not sell personal information. To make a request, email engage@secriq.com. We will respond within 30 days and may need to verify your identity first. You will not be treated differently for exercising these rights.
If you are a user enrolled by your employer, your employer controls your training data, and you may need to direct requests to them.
8. Children
The Service is for businesses and adults. It is not directed to anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.
9. Where information is stored
Personal information is stored and processed in the United States and is not intentionally transferred to other countries. If you access the Service from outside the United States, you understand that your information will be handled in the United States.
10. Changes to this policy
We may update this policy from time to time. We will post the new version here and change the "Last updated" date. If a change is significant, we will give more prominent notice, such as an email.
11. Contact us
Secriq LLC
Email: engage@secriq.com
Address: 1621 Central Ave, Suite 69275, Cheyenne, WY 82001