TL;DR: We collect only what we need to run the service. We never sell your data. You can delete everything at any time. We use industry-standard encryption at rest and in transit. GDPR and CCPA compliant.
TitanShieldAI, Inc. ("TitanShieldAI", "we", "us", or "our") operates the security monitoring and threat intelligence platform available at titanshield.ai and any associated APIs, SDKs, and subdomains (collectively, the "Service").
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service. By using the Service, you agree to the collection and use of information described in this Policy.
When you register via GitHub OAuth, we receive: your public GitHub username, email address, and profile name. We do not receive or store your GitHub password.
To provide threat detection and security monitoring, our SDK may collect:
Payments are processed by Stripe, Inc. We receive only a payment token and subscription status. We never see or store your full card number, CVV, or bank details.
If you contact us or join our waitlist, we store your email address and the content of your message to respond to you.
| Name | Purpose | Duration |
|---|---|---|
__session |
Firebase Auth session token | Session |
ts_pref |
Dashboard display preferences | 1 year |
_ga |
Anonymous analytics (Google Analytics, if enabled) | 2 years |
You may disable cookies in your browser settings. Core functionality requires the session cookie.
We will not use your data for advertising purposes or sell it to data brokers — ever.
| Processing Activity | Legal Basis |
|---|---|
| Account creation & authentication | Contract (Art. 6(1)(b)) |
| Security event monitoring | Legitimate interests (Art. 6(1)(f)) |
| Marketing communications | Consent (Art. 6(1)(a)) |
| Payment processing | Contract (Art. 6(1)(b)) |
| Legal compliance | Legal obligation (Art. 6(1)(c)) |
We share your data with the following categories of recipients only:
All third-party processors are bound by data processing agreements. We do not sell, rent, or trade your personal data to any third party for their own marketing purposes.
We retain personal data for as long as your account is active or as needed to provide services. Detailed security event logs are retained for 90 days. Aggregated, anonymized analytics are retained indefinitely. You may request deletion at any time (see Section 8).
We implement enterprise-grade security measures including:
No method of electronic transmission is 100% secure. We notify affected users within 72 hours of discovering a breach material to their data.
Request a copy of all personal data we hold about you.
Correct inaccurate or incomplete personal data.
Request deletion of all your personal data ("right to be forgotten").
Request we limit how we use your data while a dispute is resolved.
Receive your data in a structured, machine-readable format (JSON/CSV).
Object to processing based on legitimate interests or for direct marketing.
To exercise any right, email privacy@titanshield.ai. We respond within 30 days. California residents have additional rights under the CCPA — see Section 10.
TitanShieldAI operates primarily in the United States. If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, your data may be transferred to the US. We rely on Standard Contractual Clauses (SCCs) approved by the European Commission to safeguard such transfers.
California residents have the right to:
To submit a CCPA request, email privacy@titanshield.ai with the subject "CCPA Request".
The Service is not directed to individuals under 16 years of age. We do not knowingly collect personal information from children. If we become aware that a child under 16 has provided personal information, we will delete it immediately. Contact privacy@titanshield.ai if you believe we have inadvertently collected such information.
We may update this Privacy Policy periodically. We will notify you of material changes by email (if you have an account) and by posting the updated policy with a new "Last Updated" date. We encourage you to review this page periodically. Continued use of the Service after changes constitutes acceptance.
For privacy-related questions, requests, or complaints:
EU/UK residents may also lodge a complaint with their local data protection authority.