Privacy Policy
Last updated: [DATE]. This is a template. Have it reviewed by counsel before launch.
This Privacy Policy explains how Measurable (“Measurable”, “we”, “us”) handles information in connection with our website and our data and analytics services (the “Services”). Measurable is a data company for internet security.
The short version
- Your queries and data are confidential by construction. We do not collect data or metadata about your usage of the Services beyond what billing requires.
- A search is not an observation. If you look up a domain, IP, certificate, or sample, we do not then resolve, scan, crawl, or look it up because you asked. Your interest never feeds our collection.
- No cross-customer leakage. Your submitted indicators, results, and the performance of any custom index, model, or graph we build for you are isolated to your tenant and are not aggregated with other customers.
- These commitments are contractual, set out in your agreement with us.
Information we collect
- Account and contact information you provide, such as name, work email, and company, when you subscribe, contact sales, or create an account.
- Billing information required to process payments. Payments are handled by our payment processor, Stripe; we do not store full card details on our systems.
- Website usage information, such as pages visited and approximate region, collected through privacy-respecting analytics. [Specify your analytics provider, or remove this line if you do not use analytics.]
- Service usage records needed to meter and invoice your subscription.
How we use information
We use the information above to provide and operate the Services, process payments, respond to inquiries, maintain security, and meet legal obligations. We do not use customer query records or submitted indicators to build profiles, training data, or “trending” products, and we do not sell personal information.
Customer query and indicator confidentiality
Query and usage records are access-controlled and retained only as long as needed for billing and legal compliance. They are never shared across customers or folded back into shared data. Dedicated engagements can be physically isolated or deployed into your own infrastructure and region.
Our collection practices for the Services
The datasets Measurable produces are collected from publicly reachable sources of truth through active and passive internet measurement. We do not authenticate without authorization or exploit systems; scanning is well-identified and honors exclusion requests; and malware is executed only in isolated, contained environments. If you operate infrastructure and wish to discuss our measurement practices or request exclusion, contact us at the address below.
Payments
Subscriptions are billed through Stripe. When you check out, information you submit is processed by Stripe under its own terms and privacy policy. Measurable receives confirmation of payment and limited billing metadata, not your full payment-card details.
Data retention
We retain account, billing, and usage records for as long as your subscription is active and thereafter as required to comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account data, subject to those obligations.
Your rights
Depending on your jurisdiction, you may have rights to access, correct, export, or delete personal information we hold about you, and to object to or restrict certain processing. To exercise these rights, contact us at the address below.
Security
We use commercially reasonable technical and organizational measures to protect information. No method of transmission or storage is completely secure, but we work to protect your information and to disclose incidents as required by law.
Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date above.
Contact us
Questions about this Privacy Policy? Email us at zh4990@gmail.com.