Who we are
Armorer Labs, Inc., a Delaware corporation (Armorer, we, us), provides software security services to business customers. This policy covers this website, armorerlabs.com, and our services.
Where we process data on behalf of a business customer, we do so under that customer's agreement with us, and the customer's own privacy notice governs its users. Where that agreement differs from this page, the agreement controls. See our Terms.
The data we process
- Website: when you subscribe to threat-intel email, the email address you enter, the page it came from and the time, together with hashed network and browser details used to rate-limit submissions and detect abuse. When you book a call, the details you submit to the scheduling service. When you browse, the analytics data described under Cookies below.
- Contact: the details and correspondence you send to support@armorerlabs.com or security@armorerlabs.com, and business contact details, relationship history and notes kept for sales and relationship follow-up.
- Accounts: for users of our services, your business email address, user and session identifiers, and application logs. We do not store passwords.
- Customer data: data our business customers submit to or connect to the services, processed only on the customer's instructions.
How we use data
- To provide and operate the services, authenticate users and keep customers separate.
- To perform the work a customer requests.
- To secure the services, prevent abuse, investigate incidents and keep audit records.
- To send account, service and security notices.
- To respond to requests sent to support@armorerlabs.com and security@armorerlabs.com.
- To comply with law and enforce our agreements.
- To measure how this website is used and follow up on meeting and product inquiries.
Where the law requires a legal basis, we rely on performance of a contract, our legitimate interests in operating, securing and improving the services and this website, compliance with legal obligations, and consent where it is required for analytics cookies. We do not sell personal information and do not use it for cross-context behavioral advertising.
Where data is processed
We and our providers process and store data in the United States. If you use the services or this website from outside the United States, your data is transferred to and processed in the United States.
How long we keep data
| Data | How long we keep it |
|---|---|
| User identity and session records | Account life plus 30 days after termination |
| Application logs | 90 days |
| Threat-intel subscription records | Until unsubscribe, then deleted within 30 days |
| Sales and relationship contact records | 24 months from last contact |
Data we process on a customer's behalf is kept only for as long as the processing the customer requests requires, and after that only as the customer agreement provides; it is deleted within 30 days of termination. Deleted records may persist in backups for a period before disposal is complete.
Security
We protect data with technical and organizational measures appropriate to the risk, including encryption in transit and at rest and access controls. Our security documentation is available to customers on request under a non-disclosure agreement. No method of transmission or storage is completely secure.
Your rights and choices
Depending on where you live and on your relationship with the customer that controls your workspace, you may have the right to ask for access to, correction, export, restriction or deletion of your personal information, or to object to its processing. Email support@armorerlabs.com. We verify a request by matching the details you give us with the records we hold. Where we process data on behalf of a customer, we refer the request to that customer or act on its instructions. If we refuse a request, you can appeal by replying to our response, and where your jurisdiction has a data protection authority you may also complain to it.
You can unsubscribe from threat-intel email with the link in any message.
Third-party links
This site links to sites we do not operate. Their privacy practices are their own.
Changes to this policy
We may update this policy when the services, our providers or the law change. We will change the effective date above and, for material changes, notify customer account contacts by email.
Contact
Privacy questions and requests: support@armorerlabs.com. Security reports: security@armorerlabs.com. Armorer Labs, Inc. is a Delaware corporation; we operate remotely and do not publish a street address. Postal correspondence can be arranged by email.