Privacy Policy

1. Introduction

At EmptyFrog, protecting data is our core business. This Privacy Policy details how we handle information collected when you access our public website, use our intelligence platform, or interact with our APIs.

2. Our Role as a Data Processor & Indexer

We index petabytes of threat intelligence data natively found on the clear, deep, and dark web. We do not generate this data; we solely ingest and structure it. If you are a corporate entity utilizing EmptyFrog, we operate as your Data Processor under GDPR and CCPA equivalents. If your personal credentials appear within our index, it means they have been previously exposed in a public leak by a third-party service you used.

3. Information We Collect from Users

When you register for an EmptyFrog Enterprise account, we collect minimal operational data:

• Account Information: Corporate email address, full name, and billing details.
• Log Data: Diagnostic telemetry, IP addresses, search queries conducted on our platform, and API access patterns.
• Integration Secrets: Encrypted tokens to facilitate native integrations with your SIEM/SOAR platforms.

4. Data Sharing & Third-Parties

We do not sell our user's data. We only share necessary operational telemetry with secure sub-processors (such as cloud hosting providers and payment gateways) strictly under NDAs and DPAs.

We may be legally obligated to disclose information if strictly requested through a valid judicial subpoena or formal law enforcement process, specifically in cases involving cybercrime or abuse of our search capabilities.

5. Security of Your Data

EmptyFrog utilizes military-grade AES-256 encryption at rest, TLS 1.3 in transit, and strict Role-Based Access Controls (RBAC). Our environment undergoes rigorous independent penetration testing and annual SOC2 audits.

6. Your Rights (GDPR / CCPA)

Depending on your jurisdiction, you have the right to access, rectify, or request deletion of data you provided to us to maintain your account. Please note that requesting deletion of records already present within our dark web index (threat intelligence data) may require specific verification. Contact privacy@emptyfrog.io for such inquiries.