Privacy Policy


At Intruder, your privacy is important to us. This privacy policy describes Intruder's policy and privacy practices in relation to information collected from users of Intruder's services, as described at https://intruder.io/the-intruder-service/. It contains Intruder's policy pertaining to the collection, use of, and disclosure of all personal information. This privacy policy governs your access to Intruder's services and by using our platform you consent to the conditions of this privacy policy.

Information Collection Policy

Upon registering a user account in the Intruder platform, you will be asked to submit some personal information. The personal information that Intruder collects includes your name, email address and telephone number. Further information provided directly to Intruder includes the 'Targets' belonging to the user's organisation, which are entered into the platform for scanning.

All personal information relating to payment card and banking information is handled by our third-party providers 'Stripe' and 'GoCardless' and is not stored by Intruder. Any personal information provided to Stripe or GoCardless through Intruder will be subject to Stripe's/GoCardless' privacy policies and terms of use which are available on the Stripe and GoCardless websites.

Intruder may also collect other information that does not reveal specific individual identity, such as browser or device information, information collected through cookies and other technologies that are used to facilitate the operation of Intruder's platform and for other business purposes. Intruder may also identify and log automatically in our servers, or in third-party log files, IP Addresses whenever you access our site, along with the time of the visit and the page(s) visited.

Through normal use of Intruder's service, vulnerability scanning data is collected and reports are generated which contain information related to your organisation's systems. All reports generated as part of the service will be stored by Intruder for the sole purpose of making the reports available to you. This information will not be shared with any third-party under any circumstances.

How Intruder Uses Personal Information

Any personal information Intruder collects from you may be used to:

  • Deliver Intruder's services to you, including trials of the service
  • Contact you to deliver information relating to your use of the service
  • Contact you to deliver product announcements or offers on the service
  • Monitor and analyse your use of the service
  • Administer technical support
  • Verify that users have the authorisation required to use the service

Transfer of Personal Information

Intruder may use certain trusted third-party companies and individuals to help us improve the service (including, but not limited to, data storage, customer services, marking, web analytics and payment processing). These third-parties may be situated in countries outside of the EU/EEA and will have access to your personal information only for the purpose of performing these tasks on Intruder's behalf and under obligations equivalent to those in this Privacy Policy. As of the effective date of this privacy policy, Intruder's services are hosted on Google Cloud Platform in the London (UK) region. You can find more information on Google Cloud's data security at https://cloud.google.com/security/.

Information Excluding Personally Identifiable Information

Intruder may disclose, and make public, aggregated, non-private or otherwise non-personal information, such as usage statistics of the Service, without your consent.

Changing or deleting your Information

If you prefer not to receive promotional materials, our email newsletters, or other forms of communication, you may choose to opt-out by unsubscribing from our mailing lists. This can be done by clicking the ‘Unsubscribe' link at the bottom of any marketing email. If you wish to close your account with Intruder and have us remove your personal information from our systems, please click the ‘Close Account' button in the 'My Account' section of Intruder's portal. Intruder will not sell, rent, share or otherwise disclose to third-parties the personally identifiable information collected on the Site.

Data Retention

Intruder will retain your personal information for as long as your account is active or as long as it is needed in order to provide the services to you. Intruder may also retain and use your personal information if its use necessary in complying with Intruder's legal obligations or in enforcing agreements.

Security

Intruder takes security very seriously. Our security practices include technical and organizational measures which endeavour to ensure that the personal information we store is not misused, lost or unlawfully accessed.