Privacy Policy
Last updated: March 11, 2026
1. Information We Collect
Account Information: When you create an account, we collect your name, email address, and company name. If you sign in via OAuth (Google, GitHub, Microsoft), we receive your public profile information from those providers.
Usage Data: We collect information about how you interact with the platform, including pages visited, features used, API scan counts, and assessment progress.
Compliance Data: When you use the AI compliance firewall, we process API request metadata (prompt hashes, risk classifications, detected entities). We never store raw prompt content in plaintext — quarantined items are encrypted with AES-256.
Payment Information: Payment processing is handled entirely by Stripe. We do not store credit card numbers. We retain Stripe customer IDs and subscription status.
2. How We Use Your Information
- Provide and maintain the HoundShield platform
- Process CMMC/compliance assessments and generate reports
- Detect and classify sensitive data in AI API traffic
- Process payments and manage subscriptions
- Send service-related notifications (security alerts, billing)
- Improve the platform through anonymized analytics
3. Data Security
We implement industry-standard security measures including:
- AES-256 encryption for quarantined content at rest
- SHA-256 cryptographic audit trail for all compliance events
- TLS 1.3 encryption for all data in transit
- Row Level Security (RLS) in our database
- Regular security audits and dependency scanning
4. Data Sharing
We do not sell your data. We share information only with:
- Supabase: Database hosting and authentication
- Stripe: Payment processing
- Vercel: Application hosting
- OpenRouter: AI model inference (only when you use AI features)
We may disclose information if required by law or to protect the rights, safety, or property of HoundShield or its users.
5. Data Retention
Compliance event data is retained based on your subscription tier (7 days free, 90 days Pro, unlimited Enterprise/Agency). You can request deletion of your account and associated data at any time by contacting us.
6. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access, correct, or delete your personal data
- Export your data in a portable format
- Opt out of marketing communications
- Withdraw consent for data processing
7. Cookies
We use essential cookies for authentication and session management. We use anonymous analytics cookies only after you opt in via our cookie consent banner. You can control cookie preferences through the banner or your browser settings.
8. California Privacy Rights (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the right to:
- Know what personal information we collect, use, and disclose
- Request access to, or deletion of, your personal information
- Correct inaccurate personal information
- Opt out of the “sale” or “sharing” of personal information
- Not receive discriminatory treatment for exercising these rights
We do not sell or share your personal information as those terms are defined under the CCPA/CPRA. To exercise any of these rights, contact us at the address below; we will verify your request and respond within the timelines required by law. You may use an authorized agent to submit a request on your behalf.
9. Contact & Data Controller
This service is operated by [COMPANY LEGAL NAME] (“HoundShield”), [MAILING ADDRESS], which is the data controller for the personal information described in this policy.
For privacy requests or questions, contact legal@houndshield.com.