Privacy notice
How Torgen Inc. handles the details you send through the BreachGraph early-access and document request forms.
What this covers
This notice covers breachgraph.net, its early-access form and its form for requesting the MOVEit whitepaper and press summary. If you go on to a pilot, the terms we agree for that work will say how your case material is handled.
What we collect
When you send the form, we store:
- your name and work email
- your organization and role, if you give them
- the vendor, client or campaign you describe, if you ask for a pilot
- which documents you asked for, and the profile or website link you give us, if you request a document
- whether you asked for a pilot, for updates or for a document
- the page you sent it from, when it arrived, and which version of this notice the form showed
If we send you a document, we also record when we sent your personal link and how many times it was used. We don’t store your IP address or browser details with your request. Our hosting providers keep technical logs of web requests, which can include IP addresses, to run and protect their services. This site sets no advertising or analytics cookies.
Why we use it
- to answer your request
- to judge whether BreachGraph covers your case and, if it does, to offer a scoping call
- to send you BreachGraph updates, if you chose that
- to decide whether to send a document you asked for and, if we do, to send you a personal copy
We don’t sell your details or use them for advertising.
Personal copies of documents
We approve document requests by hand. If we approve yours, we email you a link that works for 14 days. Your copy carries your name, email address and the date we sent it on every page, so a shared copy can be traced to the person it was sent to. Copies are for the named reader only.
Who handles it
Torgen reviews every request by hand. These providers handle it on our behalf:
- Supabase, which receives the form and stores requests in a private database
- Vercel, which hosts this website
- Google Workspace, which carries our email
They may store and process data in the United States and in other countries where they operate.
How long we keep it
We delete a pilot request 24 months after our last contact with you. We delete a document request, and the personal copy made for you, 24 months after we send it or decline the request. We keep an update sign-up until you unsubscribe. You can ask us to delete any of these sooner.
Your choices
Email privacy at torgen.us to see, correct or delete what you sent us, or to withdraw a request. Every update we send will include a way to unsubscribe. We’ll confirm when it’s done.
Please don’t send confidential client information
The early-access form is for describing what you need to investigate. Please leave out client personal data, confidential documents and non-public incident details. If we take on your case, we’ll ask for what we need during scoping, under terms we both agree.
Children
BreachGraph is for professionals. It isn’t directed at children, and we don’t knowingly collect their information.
Changes
If we change this notice, we’ll update the date at the top. Each request records the notice version that was in effect when it was sent.
Contact
Torgen Inc., Bethesda, Maryland · privacy at torgen.us