Privacy Policy

Last updated: June 5, 2026 · Effective: June 5, 2026

1. Who We Are

ZonForge Inc. is a Delaware corporation providing an AI-powered security operations platform. We act as a data processor for customer security data and a data controller for account and usage data.

2. Data We Collect

Account data: Name, work email, company, job title, billing information when you register or purchase a plan.

Security event data (customer-controlled): Log data, API events, identity events, and threat signals ingested from your connected infrastructure. You control what data sources you connect.

Usage and analytics: Feature usage, session metadata, error logs, and performance metrics to improve the platform.

Communication data: Support tickets, demo requests, and emails you send us.

3. How We Use Your Data

• Providing and operating the ZonForge Sentinel platform
• Processing security events to generate alerts, risk scores, and investigations
• Sending transactional emails (account setup, alerts, billing)
• Improving platform performance and detecting abuse
• Complying with legal obligations

We do not sell your data. We do not use your security event data to train AI models without explicit written consent.

4. Data Sharing

We share data with:

• Sub-processors: AWS (infrastructure), Stripe (billing), Resend (email), Sentry (error tracking), Anthropic (AI features — event data anonymized before sending)
• Legal requirements: When required by law, court order, or to protect ZonForge, its users, or third parties
• Business transfers: In connection with a merger, acquisition, or sale of assets (with notice to affected customers)

5. Security Event Data

Security event data you send us (cloud logs, identity events, etc.) is processed solely to provide the services described in your subscription agreement. This data is:

• Encrypted in transit (TLS 1.3) and at rest (AES-256)
• Isolated per tenant — no cross-tenant data access
• Retained per your plan's retention period (90 days to 3 years)
• Deleted within 30 days of account termination upon request

6. Cookies and Tracking

We use session cookies for authentication (httpOnly, Secure, SameSite=Strict — not accessible to JavaScript). We use analytics cookies to measure platform usage. We do not use third-party advertising trackers on the application.

Our marketing website uses analytics. You can opt out by contacting us at privacy@zonforge.com.

7. International Data Transfers

ZonForge processes data in the United States. For customers in the EU/EEA, transfers are governed by Standard Contractual Clauses (SCCs). A Data Processing Agreement (DPA) is available at zonforge.com/legal/dpa.

8. Your Rights

Depending on your location, you may have rights to access, correct, delete, or export your personal data. To exercise these rights, contact privacy@zonforge.com. We respond within 30 days.

9. Data Retention

Account data is retained for the duration of your subscription plus 12 months for billing records. Security event data is retained per your plan tier. You can request deletion at any time.

10. Children's Privacy

ZonForge is not directed at children under 16. We do not knowingly collect personal data from children.

11. Changes to This Policy

We will notify customers by email and in-app notice at least 30 days before material changes take effect.

12. Contact

Privacy questions: privacy@zonforge.com
Data Protection Officer: dpo@zonforge.com
ZonForge Inc. · 548 Market St PMB 91776 · San Francisco, CA 94104