Privacy Policy

Datazag (“we”, “us”, “our”) is committed to protecting your privacy and handling personal data in a transparent and secure manner.

This Privacy Policy applies to:

• Visitors to our website
• Users of our customer portal
• Customers and partners using our APIs, datasets, and services
• Individuals who contact us or interact with us in a business context

This policy does not apply to personal data processed by our customers through their own use of our services, where we act as a data processor.

Datazag provides predictive domain intelligence to help security teams detect phishing, brand impersonation, and infrastructure abuse.

For the purposes of applicable data protection laws, Datazag acts as:

• a data controller for personal data collected through our website and business operations
• a data processor where we process personal data on behalf of customers under a Data Processing Agreement (DPA)

We use personal data to:

• Provide and operate our website and services
• Respond to enquiries and demo requests
• Manage customer relationships and accounts
• Improve our products, services, and security
• Monitor and protect our infrastructure from abuse
• Comply with legal and regulatory obligations

We do not sell personal data.

We may share personal data with:

• Cloud infrastructure and service providers that support our operations
• Professional advisors (legal, accounting, compliance)
• Law enforcement or regulators where required by law

All service providers are required to protect personal data and process it only for specified purposes.

We do not share personal data for advertising or data brokerage purposes.

Datazag operates globally and may process personal data in countries outside your jurisdiction.

Where required, we use appropriate safeguards such as contractual protections to ensure personal data remains protected in accordance with applicable data protection laws.

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required or permitted by law.

Retention periods depend on:

• the nature of the data
• legal or contractual requirements
• operational and security considerations

We implement appropriate technical and organisational measures designed to protect personal data, including:

• access controls and least-privilege principles
• encryption in transit and at rest where appropriate
• monitoring and logging of system access
• separation of production and non-production environments

No system is completely secure, but we continuously improve our security practices.

Depending on your location, you may have rights under applicable data protection laws, including:

• the right to access your personal data
• the right to correct inaccurate data
• the right to request deletion of data
• the right to object to or restrict processing
• the right to data portability

Requests can be made using the contact details below.

Our website may use cookies and similar technologies to:

• operate core site functionality
• understand usage and improve performance

You can control cookies through your browser settings.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

The latest version will always be available on our website.