Privacy Policy

1. Introduction

Tower Software DBA SEC Blast ("SEC Blast," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our SaaS platform and services (collectively, the "Services") available at www.secblast.com.

Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Services.

2. Age Restriction

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If you are under 18, please do not provide any information on our Services. If we learn we have collected information from a child under 18, we will delete that information promptly. If you believe we might have information from or about a child under 18, please contact us at support@secblast.com.

3. Information We Collect

3.1 Information You Provide Directly

When you use our Services, you may provide us with:

• Account Information: Name, email address, company name, job title
• Contact Information: Phone number, mailing address (if provided)
• Payment Information: Billing address, payment card details (processed securely through our payment processor)
• Communications: Information you provide when you contact us for support or feedback
• Service Data: Information and content you upload, submit, or store through our Services

3.2 Information Collected Automatically

When you access our Services, we automatically collect:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Information: Pages visited, features used, time spent on pages, click patterns
• Log Data: Access times, referring URLs, error logs
• Location Information: General geographic location based on IP address

3.3 Cookies and Tracking Technologies

We use cookies and similar technologies to operate our Services effectively. These include:

• Essential Cookies: Required for the basic functionality of our Services
• Analytics Cookies: Help us understand how users interact with our Services

For more details, see Section 11 (Cookie Policy).

4. How We Use Your Information

We use the information we collect to:

• Provide and maintain our Services
• Process transactions and send related information
• Send administrative information about your account and Services
• Respond to your comments, questions, and requests
• Send you product updates and feature announcements (with your consent)
• Monitor and analyze trends, usage, and activities
• Detect, prevent, and address technical issues
• Protect against fraudulent, unauthorized, or illegal activity
• Comply with legal obligations
• Improve and develop our Services

5. Information Sharing and Disclosure

We do not sell or rent your personal information to third parties. We do not share your personal information with third parties except in the following circumstances:

5.1 Service Providers

We may share information with third-party vendors who perform services on our behalf, including:

• Payment processing
• Data analysis (Google Analytics, Cloudflare Analytics)
• Email delivery
• Hosting services
• Customer support

These service providers are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them.

5.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities, including:

• Court orders or subpoenas
• Government or regulatory requests
• Law enforcement requirements

5.3 Business Transfers

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our Services of any change in ownership.

5.4 Consent

We may share your information with your consent or at your direction.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Active Account Data: Retained while your account is active
• Post-Termination: Deleted within 90 days after account closure, except as required for legal compliance
• Usage Analytics: Anonymized after 24 months
• Legal Records: Retained as required by applicable law (typically 3-7 years)
• Marketing Communications: Retained until you unsubscribe

7. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

7.1 Rights You May Have

• Right to Know: Request information about the personal information we collect, use, and disclose
• Right to Access: Obtain a copy of your personal information
• Right to Delete: Request deletion of your personal information
• Right to Correct: Request correction of inaccurate personal information
• Right to Portability: Receive your personal information in a structured, commonly used format
• Right to Opt-Out: Opt-out of certain uses of your information
• Right to Limit Use: Limit use of sensitive personal information
• Right to Non-Discrimination: Not receive discriminatory treatment for exercising privacy rights

7.2 Exercising Your Rights

To exercise any of these rights, please contact us using the methods in Section 14. We will respond to your request within 45 days, or as required by applicable law. We may extend this period by an additional 45 days when reasonably necessary, in which case we will inform you of the extension.

For opt-out requests, we will process your request within 15 business days.

7.3 Verification

We may need to verify your identity before processing your request. The verification process will be reasonable and proportionate to the sensitivity of the information requested.

7.4 Authorized Agents

You may designate an authorized agent to make requests on your behalf. We may require written proof of the agent's permission to act on your behalf and verify your identity directly.

8. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request that we disclose certain information about our collection and use of your personal information over the past 12 months
• Right to Delete: You have the right to request deletion of personal information we collected from you
• Right to Correct: You have the right to request correction of inaccurate personal information
• Right to Opt-Out: You have the right to opt-out of the "sale" or "sharing" of personal information
• Right to Limit Use: You have the right to limit use and disclosure of sensitive personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights

Note: We do not "sell" or "share" personal information as defined under California law.

To exercise these rights, email us at support@secblast.com or visit our Services to submit a request.

9. Other State Privacy Rights

Residents of Colorado, Connecticut, Delaware, Iowa, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia may have similar rights under their state privacy laws. To exercise your rights under applicable state law, please contact us at support@secblast.com.

10. Data Security

We implement appropriate technical and organizational security measures designed to protect your personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments
• Access controls and authentication requirements
• Employee training on data protection
• Incident response procedures

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

11. Cookie Policy

11.1 What Are Cookies

Cookies are small text files placed on your device to collect standard Internet log information and visitor behavior information.

11.2 How We Use Cookies

We use cookies to:

• Keep you signed in to your account
• Remember your preferences
• Understand how you use our Services
• Improve our Services based on usage patterns

11.3 Types of Cookies We Use

• Essential Cookies: Required for the Services to function properly. These cannot be disabled.
• Analytics Cookies: Help us understand how visitors interact with our Services.

11.4 Third-Party Cookies

Google Analytics: We use Google Analytics to analyze website usage and improve our services. Google Analytics collects information such as pages visited, time spent on site, and general geographic location. Google processes this data on servers in the United States and other countries. You can opt out by installing the Google Analytics Opt-out Browser Add-on or adjusting your cookie preferences.

Cloudflare Analytics: We use Cloudflare Analytics for privacy-first website performance monitoring. Cloudflare Analytics does not use cookies, does not store personally identifiable information, and uses privacy-first measurement techniques. Data is processed through Cloudflare's global network including US and EU servers.

11.5 Managing Cookies

Most web browsers allow you to control cookies through their settings preferences. However, limiting cookies may impact your experience of our Services.

11.6 Global Privacy Control

We honor Global Privacy Control (GPC) signals where required by law. If your browser sends a GPC signal, we will treat it as a valid opt-out request.

12. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction. We ensure appropriate safeguards are in place for international transfers as required by applicable law.

13. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending you an email notification (for material changes)

We encourage you to review this Privacy Policy periodically to stay informed about our information practices.

14. Contact Information

If you have questions, comments, or concerns about this Privacy Policy or our privacy practices, or if you wish to exercise your privacy rights, please contact us at:

Response Time: We will respond to your privacy-related inquiries within 45 days of receipt, or as required by applicable law.

15. Additional Disclosures for Specific Jurisdictions

15.1 Nevada Residents

Nevada residents may opt-out of the sale of certain covered information by contacting us at support@secblast.com. We do not currently sell covered information as defined under Nevada law.

15.2 European Economic Area (EEA) and United Kingdom (UK)

If you are located in the EEA or UK, you have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with your local supervisory authority.

15.3 Minnesota Residents

For Minnesota residents, our Chief Privacy Officer designation and contact information is available upon request at support@secblast.com.

16. Accessibility

We are committed to ensuring this Privacy Policy is accessible to individuals with disabilities. If you need this Privacy Policy in an alternative format, please contact us at support@secblast.com.