1. Introduction
Conundrum Intelligence ("we", "our", or "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, store, and share information when you use our cyber threat intelligence platform and related services.
2. Information We Collect
We collect the following types of information:
- Account Information: Name, email address, organization name, and role when you register for an account.
- Usage Data: Information about how you interact with our platform, including features used, reports generated, and search queries.
- Technical Data: IP address, browser type, device information, and log data collected automatically when you access our services.
- Organization Data: Priority Intelligence Requirements (PIRs), intelligence collection plans, and organizational documents you upload to the platform.
3. How We Use Your Information
- To provide, maintain, and improve our cyber threat intelligence services.
- To generate AI-powered intelligence reports tailored to your PIRs.
- To send you threat alerts, notifications, and newsletter content you have subscribed to.
- To provide customer support and respond to your requests.
- To monitor and analyze usage patterns to improve platform performance and security.
4. Data Isolation & Multi-Tenancy
Conundrum Intelligence operates a multi-tenant architecture with strict data isolation. Each organization's data is stored in a separate database schema, ensuring that your intelligence data, reports, and configurations are never accessible to other tenants. Shared threat intelligence data (public OSINT feeds) is maintained separately from tenant-specific data.
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you with our services. Threat intelligence data is retained in accordance with your organization's subscription and data retention settings. You may request deletion of your account and associated data at any time.
6. Data Sharing
We do not sell your personal information. We may share data with:
- AI Service Providers: We use third-party AI models to generate intelligence reports. Data sent to these providers is limited to what is necessary for report generation.
- Infrastructure Providers: Cloud hosting and database services that support platform operations.
- Legal Requirements: When required by law, regulation, or legal process.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access, correct, or delete your personal data.
- Object to or restrict processing of your data.
- Data portability — receive your data in a structured format.
- Withdraw consent for data processing at any time.
8. Security
We implement appropriate technical and organizational measures to protect your data, including encryption in transit and at rest, access controls, and regular security assessments. Our platform architecture enforces tenant-level data isolation at the database layer.
9. Contact
For privacy-related inquiries, please contact us at privacy@conundrum-intelligence.com.