Privacy Policy

Net Reaction ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Security Foundations program.

Personal Information

• Name and contact information (email)
• Business information (company name, domain)
• Account credentials and authentication data

Business Data

• Domain and email security configuration information
• Security assessment responses
• Generated security documentation content

Technical Information

• IP addresses and device information
• Usage data and analytics
• Cookies and similar tracking technologies

We use your information to:

• Provide and maintain our security assessment services
• Perform domain and email security scans
• Generate personalized security documentation
• Communicate with you about your account and our services
• Improve our services and develop new features
• Ensure security and prevent fraud
• Comply with legal obligations

We do not sell, trade, or rent your personal information. We may share information in these limited circumstances:

• Partner Organizations: If you access our service through a partner (such as an insurance cooperative or trade association), we may share aggregate program participation data with that partner
• Service Providers: Third-party vendors who help us operate our service (cloud hosting, email services, security APIs)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, sale, or acquisition
• With Your Consent: When you explicitly authorize us to share information

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. This includes:

• Encryption of data in transit and at rest
• Regular security assessments and monitoring
• Access controls and authentication requirements
• Secure cloud infrastructure with reputable providers (Microsoft Azure)

We retain your information for as long as necessary to provide our services and comply with legal obligations. When you terminate your account, we will delete or anonymize your personal information, except where retention is required by law or for legitimate business purposes.

Security scan results and assessment data are retained to provide historical trending and comparison. You may request deletion of this data at any time.

You have the right to:

• Access and review your personal information
• Correct inaccurate or incomplete information
• Request deletion of your personal information
• Object to or restrict certain processing activities
• Data portability (receive a copy of your data)

To exercise these rights, please contact us at the information provided below.

We use cookies and similar technologies to enhance your experience, analyze usage, and maintain your authenticated session. You can control cookie preferences through your browser settings, though some features may not function properly if cookies are disabled.

Our service integrates with third-party providers including Microsoft Azure for cloud services, Postmark for email delivery, and security intelligence APIs for domain scanning. These providers have their own privacy policies governing their use of your information.

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

If you have any questions about this Privacy Policy or our data practices, please contact us at: