Privacy Policy

This Privacy Policy explains how Wartiva Inc. ("Wartiva", "we", "us") collects, uses, shares, and protects personal data when you visit wartiva.com (the "Site"), request early access, contact us, or do business with us. It also explains the choices and rights you have.

When our customers use the Wartiva platform, we process the data in their tenants (including any personal data in endpoint, network, and device information) on their behalf, as a processor or service provider. That processing is governed by our agreements with the customer, including our Subscription Agreement and Data Processing Agreement, not by this policy. If you're an employee or user of one of our customers, please contact that organization with questions about how it uses Wartiva.

1. Information we collect

Information you give us

Early access requests: your name, work email address, job title, company name, company size, primary security challenge, and anything else you choose to tell us.
Communications: the content of emails, calls, and messages you send us, and your contact details.
Business relationship information: contact, billing, and contractual details for customers, prospects, resellers, and partners, and information you provide when you request support.

Information collected automatically

When you visit the Site, our hosting and content-delivery providers automatically process technical information needed to deliver and secure it, such as your IP address, browser type, the pages you request, the referring page, and the date and time of the request.

Server access logs

Our content delivery network records a log entry for each request to the Site, containing your IP address, the date and time, the page or file requested, the response status, the referring page, your browser's user agent, the edge location that served you, and connection details such as the TLS version. These logs don't include cookie values. We use them only to operate and secure the Site: troubleshooting, detecting abuse and attacks, and understanding traffic, including from automated agents. Access logs are stored in our AWS account and automatically deleted after 90 days.

Analytics and cookies

We use Google Analytics 4, a web analytics service provided by Google LLC, to understand how visitors use the Site so we can improve it. Google Analytics sets first-party cookies (named _ga and _ga_<ID>) and collects information such as the pages you view, how you arrived at the Site, the time spent on pages, interactions such as clicks and form submissions, your browser, device type, and screen size, and your approximate location (city or region) derived from your IP address. Google Analytics 4 doesn't log or store IP addresses.

Consent in Europe: if you visit from the European Economic Area, the United Kingdom, or Switzerland, analytics cookies stay off unless you accept them in our cookie banner. Without consent, Google Analytics receives only cookieless signals that don't identify you.
No advertising: we disable Google signals and advertising personalization, we don't use advertising cookies, and we don't use analytics data to advertise to you.
Your choice, anywhere: you can accept or decline analytics cookies at any time with the "Cookie settings" link in the Site footer, or install the Google Analytics Opt-out Browser Add-on.
Retention: Google Analytics keeps event-level data for no longer than 14 months, the maximum it allows for standard properties. The _ga cookies expire after up to two years unless you delete them.

Learn more about how Google uses information from sites that use its services. Apart from Google Analytics, the Site doesn't use tracking pixels or other third-party scripts, and it loads its fonts and images from our own servers. We store your cookie choice in your browser's local storage so we don't ask again.

Information from third parties

If you purchase Wartiva through a reseller or distributor, we receive from them the business contact and order information needed to provide the services.

2. How we use information and our legal bases

We use personal data only for the purposes below. Where the EU or UK General Data Protection Regulation (GDPR) applies, each use relies on one of these legal bases:

To perform a contract with you or take steps you request before entering one: evaluating and responding to early-access requests, onboarding, providing and supporting the services, and billing.
Your consent, where we ask for it, including for analytics cookies for visitors in the EEA, UK, and Switzerland. You can withdraw consent at any time without affecting processing that happened before.
To comply with legal obligations, such as tax, accounting, and responding to lawful requests from authorities.
To protect vital interests of you or another person, in the rare case it's necessary.
Our legitimate interests, where they aren't overridden by your rights: operating, securing, and improving the Site and services, including keeping server access logs and measuring Site usage with analytics outside Europe; preventing fraud and abuse; communicating with business contacts about Wartiva; and establishing, exercising, or defending legal claims.

We don't use personal data from the Site or early-access requests to make decisions based solely on automated processing that produce legal or similarly significant effects on you.

We don't sell personal data, and we don't share it for cross-context behavioral advertising. We share it only as follows:

Service providers that process data on our behalf under contract and only on our instructions, such as cloud hosting (Amazon Web Services), web analytics (Google Analytics), email delivery, and business tools.
Affiliates of Wartiva, for the purposes in this policy.
Resellers and partners involved in your purchase, to the extent needed to complete it.
Legal and safety: when required by law or legal process, or to protect the rights, property, or safety of Wartiva, our customers, or others.
Business transfers: as part of a merger, acquisition, financing, or sale of assets, subject to this policy's protections.
With your direction or consent.

4. How we store, protect, and retain information

Wartiva's platform is hosted on AWS. We protect personal data with administrative, technical, and physical safeguards appropriate to its sensitivity, including encryption in transit and at rest, multi-factor authentication for our personnel, and access limited to people who need it. Our Security Addendum describes the controls that protect Customer Data in the platform. No system is perfectly secure, so we can't guarantee absolute security.

We keep personal data only as long as we need it for the purposes in this policy, including to meet legal, accounting, and reporting requirements, and then delete or anonymize it. Early access requests are kept while we evaluate them and while we have an active relationship with you, and you can ask us to delete yours at any time.

5. International transfers

Wartiva is based in the United States, and we may process personal data in the United States and other countries where we or our service providers, including Amazon Web Services and Google, operate. When we transfer personal data from the European Economic Area, Switzerland, or the United Kingdom to countries without an adequacy decision, we use appropriate safeguards, such as the European Commission's Standard Contractual Clauses and the UK addendum to them.

6. Your rights and choices

Depending on where you live, you may have the right to:

access the personal data we hold about you and get a copy of it;
correct inaccurate or incomplete data;
delete your data;
restrict or object to certain processing, including processing based on legitimate interests and direct marketing;
receive your data in a portable format;
withdraw consent where processing is based on consent; and
not be discriminated against for exercising these rights.

Residents of California and other U.S. states with comprehensive privacy laws have these rights as provided by those laws. We don't sell or share personal information as those laws define it, and we don't use or disclose sensitive personal information for purposes that require an opt-out right.

To exercise a right, write to us at the address in "Contact us" below or call 512-377-9410. We'll verify your request and respond within the time the law requires. You may use an authorized agent where the law allows. If you're in the EEA or UK, you can also lodge a complaint with your local data protection supervisory authority.

You can change your analytics cookie choice at any time with the "Cookie settings" link in the Site footer. You can opt out of marketing emails at any time with the unsubscribe link in the email or by contacting us.

7. Children's privacy

The Site and our services are for businesses and aren't directed to children. We don't knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, contact us and we'll delete it.

8. Third-party sites

The Site links to third-party sites, such as LinkedIn and Google. Their privacy practices are governed by their own policies, not this one.

9. Changes to this policy

We may update this policy from time to time. We'll post the updated version here with a new effective date and, for material changes, give additional notice where appropriate.

10. Contact us

Wartiva Inc. is the controller of the personal data described in this policy. Questions or requests:

Wartiva Inc.
Attn: Privacy
1501 S. MoPac Expressway, Suite 220
Austin, TX 78746
512-377-9410