Privacy & Security Policy

This Privacy & Security Policy explains how Bennett Digital Systems ("we", "us", "our") handles information when you use EmailBreachGuard (the "Service").

1. Who We Are

EmailBreachGuard is operated by Bennett Digital Systems, a small independent business based in the United States. We provide a breach-check and reporting tool designed to help individuals and IT providers communicate breach risk in clear, plain language.

Contact email: support@emailbreachguard.com

2. Information We Collect

2.1 Email Addresses for Breach Checks

When you run a breach check, we collect the email address you enter so we can query our breach data provider and show you a result. We do not ask for your email password and we do not request direct access to your inbox.

2.2 Account and Billing Information (Stripe)

If you subscribe to EmailBreachGuard or other paid plans, payment details are processed securely by our payment processor Stripe. We do not store or see your full credit card number. Stripe may collect:

• Contact details such as name, email address, and billing address
• Partial payment card details and transaction history
• Fraud-prevention and compliance information as required by law

These are handled under Stripe's own privacy policy and terms.

2.3 Starter Kit and Email List Sign-ups

If you request the Email Safety Starter Kit or join our mailing list, we collect your email address (and optionally your name) so we can send you the requested material and occasional updates. You can unsubscribe at any time using the link in our emails.

2.4 Basic Usage and Analytics Data

We may collect limited technical information when you use the site, such as:

• Pages viewed and actions taken (for example, starting a check or downloading a report)
• Approximate region based on IP (country or state)
• Device type, browser type, and referring URL

This helps us understand how the tool is used and where we can improve reliability and usability.

3. How We Use Information

We use the information we collect to:

• Run real-time breach checks for the email addresses you provide
• Generate on-screen breach summaries and PDF-style reports
• Provide customer support and respond to inquiries
• Operate, maintain, and improve EmailBreachGuard and related services
• Send starter-kit emails, product updates, and security education (only if you opt in)
• Meet legal, accounting, and tax obligations

We do not sell your personal information or breach results to data brokers or ad networks.

4. Data Retention

We aim to keep data only as long as it is reasonably needed for the purposes described in this policy.

• Breach checks: For the MVP phase, we may store logs containing the checked email address and a summary of the result for a limited time for abuse prevention, troubleshooting, and performance monitoring.
• Starter kit and marketing emails: We retain your contact details until you unsubscribe or ask us to delete them.
• Billing records: Subscription and payment information is retained as required by tax and accounting laws.

5. Sharing Information with Third Parties

We may share data with trusted third parties that help us operate EmailBreachGuard. Examples include:

• Breach data provider: A third-party service that returns breach information based on the email address you provide.
• Payment processor (Stripe): For secure subscription billing and invoicing.
• Email service provider: To deliver starter kits, onboarding messages, and product updates you've requested.
• Analytics tools: To understand usage patterns and improve performance.

We may also share information if required by law, to respond to lawful requests from authorities, or to protect our rights and the security of our services.

6. Cookies and Similar Technologies

EmailBreachGuard may use cookies or similar technologies to remember basic preferences and to support analytics. You can usually control cookies through your browser settings. Disabling some cookies may affect certain site features.

7. Security Measures

We take reasonable steps to protect information, including:

• Using HTTPS encryption for traffic to and from our site
• Limiting direct access to internal tools and logs
• Working with established providers for payments and infrastructure

However, no online service can guarantee perfect security. Breach information is based on external data sources that may themselves be incomplete or subject to change.

8. Your Choices and Rights

Depending on your location, you may have rights such as:

• Requesting a copy of the personal data we hold about you
• Requesting corrections or updates
• Requesting deletion of certain information, where legally allowed
• Opting out of marketing emails by using the unsubscribe link

To exercise any of these rights, email us at support@emailbreachguard.com . We may need to verify your identity before fulfilling your request.

9. International Visitors

EmailBreachGuard is operated from the United States. If you access the Service from outside the U.S., your information may be transferred to, stored in, or processed in the United States or other countries that may have different data protection laws than your home country.

10. Changes to This Policy

We may update this Privacy & Security Policy from time to time. If we make significant changes, we will update the "Last Updated" date at the top of this page and, where appropriate, highlight the change in the app or by email.

11. How to Contact Us

If you have questions about this policy or how we handle data, please contact:

Bennett Digital Systems
Email: support@emailbreachguard.com