StackHawk Privacy Policy

This “Privacy Policy” describes the privacy practices of StackHawk, Inc. and our subsidiaries and affiliates (collectively, “StackHawk”, “we”, “us”, or “our”) in connection with the www.stackhawk.com website, the StackHawk client-side software application (the “Software”), and any other website or mobile application that we own or control and which posts or links to this Privacy Policy (collectively, the “Service”), and the rights and choices available to individuals with respect to their information.

Personal Information We Collect

Information you provide to us. Personal information you provide to us through the Service or otherwise includes:

• Business and personal contact information, such as your first and last name, email and mailing addresses, phone number, professional title and company name.
• Information provided in response to StackHawk questionnaires, such as information relating to your company’s software framework, including software routes, categories of data being stored and your internal assessment(s) of your company’s security.
• Registration information, such as information that may be related to a service, an account or an event you register for.
• Scan results obtained from the Software, such as information relating to potential code vulnerabilities, including metadata related thereto.
• Feedback or correspondence, such as information you provide when you contact us with questions, feedback, or otherwise correspond with us online.
• Usage information, such as information about how you use the Service and interact with us, including information associated with any data you upload to the websites or otherwise submit to us, and information you provide when you use any interactive features of the Service.
• Other information that we may collect which is not specifically listed here, but which we will use in accordance withthis Privacy Policy or as otherwise disclosed at the time of collection.

Information we obtain from other third parties. We may receive personal information about you from third-party sources. For example, a business partner may share your contact information with us if you have expressed interest in learning specifically about our products or services, or the types of products or services we offer. We may obtain your personal information from other third parties, such as marketing partners, publicly-available sources and data providers.

Cookies and Other Information Collected by Automated Means
We, our service providers, and our business partners may automatically log information about you, your computer device, and activity occurring on or through the Service, including but not limited, your computer operating system type and version number, manufacturer and model, device identifier (such as the Google Advertising ID or Apple ID for Advertising), browser type, screen resolution, IP address, the website you visited before browsing to our website, general location information such as city, state or geographic area; information about your use of and actions on the Service, such as pages or screens you viewed, how long you spent on a page or screen, navigation paths between pages or screens, information about your activity on a page or screen, access times, and length of access; and other personal information. Our service providers and business partners may collect this type of information over time and across third-party websites and mobile applications.

A “cookie” is a text file that websites send to a visitor‘s computer or other Internet-connected device to uniquely identify the visitor’s browser or to store information or settings in the browser. A “web beacon,” also known as a pixel tag or clear GIF, is typically used to demonstrate that a webpage was accessed or that certain content was viewed, typically to measure the success of our marketing campaigns or engagement with our emails and to compile statistics about usage of our websites.

Web browsers may offer users of our websites the ability to disable receiving certain types of cookies; however, if cookies are disabled, some features or functionality of our websites may not function correctly.

How We Use Your Personal Information

We use your personal information for the following purposes and as otherwise described in this Privacy Policy or at the time of collection:

To operate the Service. We use your personal information to:

• provide, operate and improve the Service
  provide information about our products and services
• establish and maintain your user profile on the Service
• enable security features of the Service, such as by sending you security codes via email or SMS, and remembering devices from which you have previously logged in
• communicate with you about the Service, including by sending you announcements, updates, security alerts, and support and administrative messages
• understand your needs and interests, and personalize your experience with the Service and our communications
• provide support and maintenance for the Service
• to respond to your requests, questions and feedback

For research and development. We analyze use of the Service to analyze and improve the Service and to develop new products and services, including by studying user demographics and use of the Service.

To send you marketing and promotional communications. We may send you StackHawk-related marketing communications as permitted by law. You will have the ability to opt-out of our marketing and promotional communications as described in the Opt out of marketing section below.

To comply with law. We use your personal information as we believe necessary or appropriate to comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities.