Privacy Policy

This Privacy Policy explains how PhishNova, Inc. ("PhishNova", "we", "us") collects, uses, and protects personal data when you visit our website, request a demo, or use our platform.

Information we collect

• Information you provide. When you book a demo, start a trial, subscribe to updates, or contact us, we collect your name, work email, company, role, phone (if provided), and anything you include in a message.
• Information collected automatically. We collect limited technical data such as IP address and browser user-agent to secure our forms and prevent abuse.
• Analytics. We use privacy-first, cookieless analytics to understand aggregate traffic. We do not sell personal data.

How we use information

• To respond to your enquiries and provide demos, trials, and support.
• To operate, secure, and improve our website and services.
• To send program and product updates you have requested (you can unsubscribe at any time).
• To comply with legal obligations.

Legal bases (GDPR)

Where the GDPR applies, we rely on your consent (for marketing communications), the performance of a contract (to provide services you request), and our legitimate interests (to secure our site and communicate with prospective customers).

Sharing and sub-processors

We share personal data only with service providers who process it on our behalf (for example, hosting, email delivery, and analytics), under contracts that require appropriate safeguards. We do not sell your personal data.

International transfers

Where personal data is transferred across borders, we use appropriate safeguards such as Standard Contractual Clauses.

Data retention

We retain personal data only as long as necessary for the purposes described here, to comply with our legal obligations, resolve disputes, and enforce our agreements.

Your rights

Depending on your location, you may have the right to access, correct, delete, or port your personal data, to object to or restrict certain processing, and to withdraw consent. Under India’s DPDP Act, you may exercise rights as a Data Principal, including grievance redressal. To make a request, email privacy@phishnova.com.

Security

We protect personal data with encryption in transit and at rest, access controls, and least-data practices. See our Security page for more detail.

Children

Our services are intended for organizations and their employees and are not directed to children.

Changes

We may update this policy from time to time. Material changes will be reflected in the "Last updated" date at the top of this page.

Contact

Questions about this policy or your data can be sent to privacy@phishnova.com.