Privacy Policy

CSIRT Dashboard ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

2.1 Personal Information

We may collect personal information that you voluntarily provide to us when you register for an account, such as your name, email address, and organization. We may also collect information when you fill out a form, submit a security incident, or communicate with us.

2.2 Authentication Information

When you authenticate through third-party services like GitHub, we receive information necessary to provide you with access to our platform, in accordance with the authorization procedures of those third-party services.

2.3 Usage Data

We may automatically collect certain information about how you interact with our platform, including your IP address, browser type, operating system, referring URLs, and actions taken within the platform.

We may use the information we collect for various purposes, including:

• Providing, maintaining, and improving our platform
• Creating and managing user accounts
• Processing and managing security submissions
• Sending administrative emails and notifications
• Responding to your comments, questions, and requests
• Monitoring platform usage and analyzing trends
• Protecting the security and integrity of our platform

We may share your information in the following situations:

• With your consent or at your direction
• With team members within your organization as necessary for collaboration
• With third-party service providers that perform services on our behalf
• To comply with legal obligations or protect our rights
• In connection with a business transaction, such as a merger or acquisition

We implement reasonable security measures designed to protect your information. However, no security system is impenetrable, and we cannot guarantee the security of your information.

We will retain your information for as long as your account is active, as necessary to provide you with the services, or as required by law. Upon request, we will delete or anonymize your information so that it no longer identifies you, unless we are legally required to retain certain information.

Depending on your location, you may have certain rights regarding your personal information, such as:

• Accessing, correcting, or deleting your information
• Restricting or objecting to our use of your information
• Receiving a copy of your information in a structured, machine-readable format
• Withdrawing consent where our processing is based on your consent

To exercise these rights, please contact us using the information provided below.

Our platform is not directed to children under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.