Reach Security, Inc. ("Reach Security," "we," "us," or "our") is committed to protecting the privacy and security of information we collect from visitors to our website and customers of our cybersecurity platform. This Privacy Policy describes how we collect, use, store, disclose, and protect personal information in connection with your use of our website at reaochsecurity.org (the "Site") and our security platform services (collectively, the "Services").
By accessing or using our Site or Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices described here, please do not use our Site or Services. If you have questions about this policy or our privacy practices, please contact us using the information provided at the end of this document.
Reach Security, Inc. is a cybersecurity company headquartered in Washington, DC, United States. We provide AI-powered threat detection and response software to enterprise organizations. Our platform collects and analyzes security telemetry from customer environments to detect and respond to cybersecurity threats.
For purposes of applicable data protection law, Reach Security, Inc. is the data controller for personal information collected through our Site and marketing activities. For information processed through our platform on behalf of enterprise customers, Reach Security acts as a data processor, and the relevant enterprise customer is the data controller responsible for its employees' and end users' data.
Our registered address is: Reach Security, Inc., 1150 Connecticut Avenue NW, Suite 900, Washington, DC 20036, United States.
We collect several types of information in connection with our Site and Services:
We collect information you provide directly when you:
When you visit our Site, we automatically collect certain information through cookies and similar tracking technologies:
We may receive information about you from third parties including:
When enterprise customers deploy our security platform, the platform processes security telemetry from their environments. This telemetry may include log data, network traffic metadata, user activity records, and other security-relevant data from the customer's IT infrastructure. We process this data strictly as a data processor on behalf of our enterprise customers, pursuant to our data processing agreements with those customers. Our use of such data is limited to providing and improving the Services as directed by the customer.
We use the information we collect for the following purposes:
You may opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email or by contacting us at privacy@reaochsecurity.org.
For individuals in the European Economic Area, the United Kingdom, and other jurisdictions with similar requirements, we process personal information on the following legal bases:
We do not sell your personal information. We share your information only in the following circumstances:
We share information with third-party service providers who assist us in operating our Site and Services. These providers are contractually obligated to use your information only for the purposes of providing services to us and to maintain appropriate security measures. Categories of service providers include: cloud infrastructure providers, customer relationship management software, email and marketing automation platforms, payment processors, analytics providers, identity verification services, and customer support software.
If Reach Security is involved in a merger, acquisition, sale of assets, or other corporate transaction, your information may be transferred as part of that transaction. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.
We may disclose your information if required to do so by law or in good-faith belief that such disclosure is necessary to comply with legal process, respond to lawful requests from public authorities, protect our rights or property, prevent fraud or illegal activity, or protect the safety of our customers or the public.
We may share your information with third parties when you have provided your explicit consent to do so.
We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. The specific retention period depends on the nature of the information and the purpose for which it was collected:
Depending on your location, you may have the following rights regarding your personal information:
You have the right to request a copy of the personal information we hold about you. Upon verified request, we will provide this information in a structured, commonly used, and machine-readable format where technically feasible.
You have the right to request correction of inaccurate or incomplete personal information we hold about you. You may update much of your account information directly through your account settings.
You have the right to request deletion of your personal information, subject to certain exceptions. We may retain information we are required to keep by law, that is necessary to complete transactions you have requested, or that is needed for legitimate business purposes as described in this policy.
In certain circumstances, you have the right to restrict our processing of your personal information or to object to certain processing activities, including direct marketing.
Where we process your information based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.
To exercise any of these rights, please contact us at privacy@reaochsecurity.org with your name, contact information, and a description of your request. We will respond within 30 days of receiving a verified request. We may need to verify your identity before processing certain requests.
California residents have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale or sharing of personal information (we do not sell personal information), and the right to non-discrimination for exercising privacy rights. To make a CCPA request, contact us at privacy@reaochsecurity.org.
Reach Security is headquartered in the United States. If you are located outside the United States, please be aware that information we collect may be transferred to, stored, and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that are different from those in your country.
For transfers of personal data from the European Economic Area or the United Kingdom to the United States, we rely on the EU-US Data Privacy Framework, Standard Contractual Clauses approved by the European Commission, or other lawful transfer mechanisms. A copy of the relevant transfer safeguards may be obtained by contacting us at privacy@reaochsecurity.org.
We implement technical and organizational security measures designed to protect personal information from unauthorized access, disclosure, alteration, or destruction. These measures include encryption of data in transit and at rest, access controls limiting personal data access to authorized personnel, regular security assessments and penetration testing of our systems, security training for our personnel, and incident response procedures.
As a cybersecurity company, security is at the core of our operations. However, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security, and you transmit personal information to us at your own risk. If you believe your interaction with us is no longer secure, please contact us immediately at security@reaochsecurity.org.
We use cookies and similar tracking technologies on our Site. Cookies are small text files stored on your device that help us provide and improve our Services. For detailed information about the specific cookies we use, their purposes, and how to control them, please see our Cookie Policy at Cookie Policy.
Our Site and Services are not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16 without parental consent, we will take steps to delete that information promptly. If you believe we may have collected information from a child under 16, please contact us at privacy@reaochsecurity.org.
Our Site may contain links to third-party websites, products, and services. Our Privacy Policy does not apply to third-party websites, and we are not responsible for the privacy practices of those websites. We encourage you to review the privacy policies of any third-party website you visit.
We may update this Privacy Policy periodically to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this policy and, where appropriate, notify you via email or a prominent notice on our Site. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
Reach Security, Inc.
Privacy Team
1150 Connecticut Avenue NW, Suite 900
Washington, DC 20036
United States
Email: privacy@reaochsecurity.org
For European residents, you also have the right to lodge a complaint with your local data protection authority. A list of EEA data protection authorities and their contact information is available at edpb.europa.eu.