Privacy Policy

Effective Date: March 14, 2026

ImaraForge ("we", "us", or "our") is committed to protecting the privacy of our customers and website visitors. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our platform and services.

1. Information We Collect

We may collect the following categories of information:

• Account Information: Name, email address, organization name, and role when you register.
• Device & Scan Data: Hostname, OS version, security scan results, vulnerability reports, and compliance scores submitted by enrolled devices.
• Usage Data: Pages visited, features used, session duration, and interactions with the platform.
• Technical Data: IP address, browser type, operating system, and device identifiers collected automatically via server logs.
• Payment Data: Billing information processed securely through our payment provider (Stripe). We do not store credit card numbers.

2. How We Use Your Information

• Provide, maintain, and improve the ImaraForge platform
• Authenticate users and manage organization accounts
• Generate security scores, compliance reports, and remediation recommendations
• Process subscription payments and manage billing
• Send service-related communications (security alerts, account notifications)
• Monitor platform health and prevent abuse

3. Data Sharing & Disclosure

We do not sell your personal information. We may share data with:

• Service Providers: Cloud hosting (Microsoft Azure), payment processing (Stripe), and analytics services that help us operate the platform.
• Legal Requirements: When required by law, regulation, or legal process.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.

4. Data Security

We implement industry-standard safeguards including:

• Encryption in transit (TLS 1.2+) and at rest
• Role-based access control (RBAC) via Tallawah CIAM
• HttpOnly, Secure, SameSite session cookies
• Regular security assessments and vulnerability scanning

5. Data Retention

We retain your account data for as long as your account is active. Scan data and security reports are retained per your organization’s subscription tier and applicable retention policies. You may request deletion of your data at any time.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal data
• Object to or restrict certain processing activities
• Data portability
• Withdraw consent at any time

7. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising cookies. See our cookie settings for details.

8. Changes to This Policy

We may update this Privacy Policy periodically. We will notify registered users of material changes via email or in-platform notification.

9. Contact Us

For privacy-related inquiries, contact us at privacy@imaraforge.com or visit our Contact page.