How we handle your case
What happens to the vendors, clients and campaigns you name when you ask for a pilot, and to anything you tell us while we work on it.
It stays private to you
Only the Torgen people working on your request see the companies you name. We don’t show them to other BreachGraph users, publish them, or use them as examples or in marketing without your written permission.
We use it only for your work
Your case is used to answer you, scope your pilot and build your reports. It isn’t used for anyone else’s work.
One thing to know: your questions help decide which public evidence we add to BreachGraph next. If we add a public filing about a vendor because you asked about it, that filing becomes part of BreachGraph for everyone. Your name, the fact that you asked, and your list of clients don’t.
AI tools
We use AI assistants to help research and draft reports. Model training is turned off on every one of them, so the vendors and clients you name never reach a tool that trains on what it’s given. Before your pilot starts, we’ll tell you which assistants we use. If you’d rather your case stayed out of them altogether, say so and we’ll keep it out.
What not to send yet
Until we’ve agreed the pilot’s scope, please describe what you need to investigate without client personal data, confidential documents or non-public incident details. If we need more, we’ll ask during scoping, under terms we both agree.
Where it’s kept, and for how long
Requests are stored in a private database run by Supabase, and our email runs on Google Workspace. We delete a pilot request 24 months after our last contact with you, or sooner if you ask. The privacy notice has the details.
Questions
Email privacy at torgen.us to see, correct or delete what you’ve sent us.