Privacy Policy

TensorGuard Privacy Policy

Last Updated: June 6th, 2025

Effective Date: June 6th, 2025

Thank you for using TensorGuard. This Privacy Policy outlines how TensorGuard Inc. (“TensorGuard,” “we,” “our,” or “us”) collects, uses, stores, shares, and protects your information when you use our website, https://tensorguard.com (the “Site”), and our forensic analysis platform, tools, and related services (collectively, the “Services”).

This Policy is a legally binding agreement between you and TensorGuard. By creating an account or using our Services, you acknowledge that you have read, understood, and agree to the practices described in this Policy.

1. Third-Party Authentication & Data Usage Disclosures

This Privacy Policy applies to all information we process through our Services. We use third-party authentication providers to create and access your account.

Google Limited Use Disclosure: TensorGuard’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
GitLab Data Disclosure: TensorGuard’s use of information received from GitLab’s APIs is governed by our commitment to user privacy as outlined in this policy and by GitLab’s own Privacy Statement and Terms of Service.

For both providers, our access and use are strictly limited as follows:

What we access: We access your basic profile information (Real Name, Email Address).
How we use it: This data is used solely for user identification, to create and authenticate your account, and to allow other users within your designated organization on the TensorGuard platform to identify you.
How we store it: Your name and email address are stored securely on our servers.
How we share it: This information is not sold or shared for advertising purposes. It is shared only with our essential service providers for operational purposes (as detailed in Section 5) and with other members of your organization within the platform.

2. Information We Collect

We collect several categories of information in providing our Services.

A. Information You Provide to Us Directly:

Account Information: When you register for a TensorGuard account via a third-party authentication service like Google’s or GitLab’s OAuth 2.0 / OIDC service, we collect your Real Name and Email Address from your respective account.
Payment Information: When you subscribe to our paid services, you provide payment information (such as credit card numbers and billing information) directly to our third-party payment processor, Stripe. We do not store or have direct access to your full payment card details.
Communications: When you contact us for support or other inquiries via email to tensorguard.com, we retain records of those communications.

B. Information Collected Through Your Use of the Services:

Forensic Data: Our service is a forensic platform. When an authorized user in your organization uses the “TensorGuard Forensic Collector” to acquire data from a device, that data is uploaded to our platform for analysis at your direction. This data may include any and all information present on the device.
Sensitive Personal Information (SPI): You acknowledge that Forensic Data may inherently contain “Sensitive Personal Information” as defined by applicable U.S. state privacy laws (such as the California Privacy Rights Act). This may include, but is not limited to, social security numbers, driver’s licenses, financial account details, precise geolocation, racial or ethnic origin, religious beliefs, and the contents of private communications like emails and text messages. We only process this data on your behalf and at your direction to provide the Services. We do not use SPI for any purpose other than providing, maintaining, and securing the forensic analysis service.
Usage and Log Information: We automatically collect information about your interactions with the Services, including your login status, session information, and the Internet Protocol (IP) address from which you access the platform. This information is necessary for security, auditing, and maintaining the Services.

C. Information from Third-Party Sources:

Third-Party Authentication Providers: As described above, we collect your name and email from your chosen provider (e.g., Google, GitLab) to facilitate account creation and login.
Stripe: Our payment processor, Stripe, may provide us with transaction details or tokens for billing management, but not your full payment details.
Google Analytics: We use Google Analytics on our public-facing homepage (https://tensorguard.com). This service uses cookies to collect data about site traffic and user interaction. This tracking is limited to the public Site and is not used within the secure, authenticated TensorGuard platform itself.

3. How We Use Your Information

We use the information we collect for the following business and commercial purposes:

To Provide and Maintain the Services: To authenticate users, process forensic data as directed by you, process transactions, and ensure the operational functionality of the platform.
For Security and Fraud Prevention: To monitor for and prevent security threats, unauthorized access, and violations of our terms.
For Customer Support: To respond to your requests, questions, and feedback.
For Analytics and Service Improvement: To understand how our users interact with the Services to improve functionality and user experience.
For Marketing and Promotional Communications: We may use your Account Information (name and email address) to send you information about our Services, updates, or other promotional content. You may opt out of these communications at any time. We will never use Forensic Data for any marketing or promotional purpose.
To Comply with Legal Obligations: To cooperate with public and government authorities, courts, or regulators in accordance with our legal obligations.

4. How We Retain Your Information

We retain your Account Information and Usage and Log Information for as long as your account is active or as needed to provide you with the Services.

We retain Forensic Data collected on your behalf for as long as your organization’s account is active.

You may delete your information as described in Section 7. We may retain certain information for a longer period if required to comply with our legal obligations (e.g., retaining transaction records), resolve disputes, or enforce our agreements.

We do not “sell” or “share” (as defined by the CCPA/CPRA) your personal information. We only disclose your information to the following categories of third parties for the purposes described in this policy:

Other Users in Your Organization: Your name and email address are visible to other users who are part of the same organization on the TensorGuard platform.
Service Providers: We engage third-party companies to process information on our behalf. These service providers are contractually obligated to protect your data and are prohibited from using it for any other purpose.
- Cloud Hosting and Processing: Forensic Data and other user data are hosted and processed by our cloud infrastructure providers, which include Google Cloud, Hetzner US, and Cloudflare.
- Email Communications: Transactional and promotional emails may be managed by MailGun.
- Payment Processing: All payments are handled by Stripe.
For Legal Reasons: We may disclose your information to a third party if we are required to do so by law, such as in response to a subpoena, court order, or other valid legal process.
In Case of a Business Transfer: If TensorGuard is involved in a merger, acquisition, or sale of all or a portion of its assets, your Account Information may be transferred as part of that transaction. In such an event, we will notify you via email. As a core principle, your Forensic Data will not be sold or transferred to a third party for their own use; it will only continue to be processed by the essential cloud service providers listed above as part of the continuity of the service.

6. Data Security

We implement technical and organizational measures designed to protect your information from unauthorized access, use, alteration, or destruction. These measures include encryption of data in transit and at rest, strict access controls, and regular internal security audits. However, no security system is impenetrable, and we cannot guarantee the absolute security of your data.

7. Your Privacy Rights and Choices

You have rights and choices regarding your personal information.

Access, Correction, and Deletion: You have the right to request access to, correction of, or deletion of your personal data.
How to Exercise Your Rights: You may exercise your rights via the following methods:
1. Email: Send a request to privacy@tensorguard.com. We will verify your request using the email address associated with your account.
2. In-Platform Controls:
  - Any user can select “Delete my Account” inside the platform console to delete data tied to their individual user account.
  - An organization administrator can select “Delete my Organization” to delete all data tied to the organization, including all user accounts and all uploaded Forensic Data.

We will not discriminate against you for exercising your privacy rights. Please note that we may need to retain certain information for recordkeeping purposes or to complete transactions that you began prior to requesting a change or deletion, as permitted by law.

Do Not Track: Some browsers transmit “Do Not Track” (DNT) signals. Our public Site’s response to DNT signals is dictated by the behavior of the Google Analytics script. Within the secure platform, DNT signals are not honored as we only collect information essential for the platform’s operation and security.

8. Children’s Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. Furthermore, as a condition of using our Services, you agree in our Terms of Service not to use the TensorGuard Forensic Collector on any device containing the data of minors. If we become aware that we have inadvertently collected personal data from a child or that a user has violated this policy, we will take steps to delete that information as soon as possible.

9. Operation in the United States

Our services are operated exclusively within the United States and are intended for use only by residents of the United States. If you are located outside of the United States, please be aware that information you provide to us will be transferred to, stored, and processed in the United States.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email to the address associated with your account. Your continued use of the Services after the effective date of the revised policy will constitute your acceptance of the changes. We encourage you to review this Privacy Policy periodically.