Privacy policy
How Securefase collects and handles personal data.
1. Who we are
Securefase operates from New Delhi, India and Dubai, UAE. For the purposes of the GDPR, Securefase is the controller of personal data collected through this website, and a processor of customer data processed within the Securefase platform.
2. Data we collect
Website visitors
- Contact details you submit through our forms: name, work email, company, role and any message content.
- Technical data collected automatically: IP address, browser and device type, pages visited and referring source.
Platform customers
- Account data: user identities provisioned through SSO or SCIM, roles and permissions.
- Scan data: source code metadata, dependency manifests, infrastructure definitions, cloud configuration and identity metadata, and runtime telemetry from the systems you connect.
- Usage data: actions taken in the platform, retained as an immutable audit trail.
3. How we use it
- To provide, secure and improve the Securefase platform.
- To respond to enquiries and provide support.
- To meet legal, regulatory and contractual obligations.
- With your consent, to send product and company updates. You may withdraw consent at any time.
4. Legal bases
Where the GDPR applies, we rely on: performance of a contract (providing the platform), legitimate interests (securing our services, responding to enquiries), consent (marketing communications), and legal obligation (record keeping and compliance).
5. Sharing and sub-processors
We do not sell personal data. We share data with sub-processors who support hosting, infrastructure, communications and analytics, each bound by contractual confidentiality and data-protection obligations. A current sub-processor list is available to customers on request.
6. International transfers
Data may be processed in the countries where we operate. Where personal data is transferred outside its country of origin, we rely on appropriate safeguards, including standard contractual clauses where required. Enterprise customers may configure the region in which their tenant data is held.
7. Retention
We retain enquiry data for as long as needed to respond and for a reasonable period afterwards. Customer platform data is retained for the term of the agreement and deleted on request or after termination, in line with the applicable contract.
8. Security
We apply encryption in transit and at rest, least-privilege access, tenant isolation and immutable audit logging. Onboarding to the platform is read-only by default; write access is a separate, explicit and revocable grant.
9. Your rights
Depending on your jurisdiction, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, and to data portability. To exercise any right, contact us at the address below. You also have the right to lodge a complaint with your supervisory authority.
10. Cookies
We use cookies that are strictly necessary for the site to function, and — where you consent — analytics cookies that help us understand how the site is used. You can control cookies through your browser settings.
11. Contact
Privacy enquiries: privacy@securefase.com
12. Changes
We will post any changes to this policy on this page and update the date above.