Privacy Notice

This notice covers researchsecurity.ai — this marketing website. It does not cover the ResearchSecurity.ai product application, which operates under a separate data processing agreement with each institutional customer.

Draft — pending counsel review. This notice describes what the marketing site actually does today. The document will be finalized with counsel before public launch; the operative statements below are accurate to current practice.

What we collect on this site

• Information you submit via the contact form on /contact: name, role, institution, institutional email address, and any free-text you include. This is transmitted to us so a person from the team can reply to your inquiry.
• Standard server logs from Cloudflare Pages (the site's hosting provider), which include your IP address and request metadata. Retention and use governed by Cloudflare's documentation.
• Cloudflare Turnstile is used on the contact form to prevent automated abuse. Turnstile is a CAPTCHA alternative that does not use tracking cookies.

What we do not collect

• No advertising trackers.
• No cookie wall. We are a compliance company; the marketing site should not itself feel surveillance-y.
• No third-party analytics that track individuals across sessions. If we later add a privacy-respecting analytics tool that aggregates only site-level metrics, we will name it here and describe what it collects.

How we use contact-form submissions

Solely to reply to your inquiry, evaluate a possible Founding Partner engagement, or send the materials you requested. Submissions are stored in the email inbox they route to and are not sold, shared, or exchanged with third parties.

Third parties who process data on our behalf

• Cloudflare — site hosting (Cloudflare Pages), request protection (Cloudflare Turnstile), and DNS.
• Resend — transactional email delivery for the contact form.

Your choices

You may request access to, correction of, or deletion of personal information you have provided by using the contact form and mentioning "privacy" in your message. Where applicable law grants additional rights (for example, under the GDPR or state privacy statutes), we honor those rights.

Children

This site is intended for institutional research administration audiences and is not directed to children under 16.

Contact

Use the contact form for any privacy-related question.

Changes to this notice

We will update this notice as our practices change. The "Last reviewed" date at the top reflects the most recent revision.