Oleo Bone
@oleobone

Privacy Policy

At Ssquad, we are redefining threat discovery and cyber-intelligence through the world’s first predictive cyber-intelligence platform. Our technology combines actionable threat intelligence, attack surface discovery, and digital risk protection, empowering organizations with proactive, multi-layered insights and early warning capabilities.

We take the privacy and security of your personal data seriously. This Privacy Policy explains how Ssquad (including its subsidiaries and affiliates, hereafter referred to as “Ssquad,” “we,” “our,” or “us”) collects, processes, stores, shares, and protects personal data in accordance with the requirements of applicable data privacy laws, including but not limited to:

  • European Union General Data Protection Regulation (GDPR)
  • United Kingdom GDPR (UK GDPR)
  • California Consumer Privacy Act (CCPA) & California Privacy Rights Act (CPRA)
  • Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA)
  • India’s Digital Personal Data Protection Act (DPDP Act)
  • Australia Privacy Act (1988) & Australian Privacy Principles (APPs)

By engaging with our services, you acknowledge that your personal data will be processed as outlined in this Policy.

Scope

This Privacy Policy applies to all personal data processed by Ssquad in connection with our operations. This includes data pertaining to employees, clients, prospective clients, job applicants, contractors, suppliers, vendors, and other partners across all jurisdictions where we conduct business.

Our Privacy Commitments

Ssquad adheres to the following core principles when handling personal data:

  • Processing personal data in a lawful, fair, and transparent manner
  • Collecting data for clearly defined and legitimate purposes
  • Minimizing data collection to only what is necessary
  • Maintaining data accuracy and currency
  • Retaining personal data only for as long as required
  • Implementing robust security measures to protect data integrity, confidentiality, and availability

Legal Bases for Processing

Depending on your location and applicable law, Ssquad processes personal data on one or more of the following lawful bases:

  • Your explicit consent
  • Performance of a contract or pre-contractual measures
  • Compliance with legal obligations
  • Legitimate interests pursued by Ssquad or third parties, provided these are not overridden by your fundamental rights and freedoms

Categories of Personal Data Collected

The personal data we may collect includes:

  • Identifiers: Name, email address, phone number, postal address
  • Professional information: Job title, employer name, employment history, qualifications, skills
  • Billing details: Financial and payment-related information (if applicable)
  • Technical data: IP address, device identifiers, browser type, operating system, location data, online activity
  • Communications: Emails, inquiries, support tickets, feedback
  • Cookies and related tracking data (see Cookies & Tracking section)

Sources of Personal Data

We collect personal data from multiple sources, including:

  • Directly from you (registration forms, correspondence, job applications)
  • Publicly available sources
  • Third-party service providers and business partners
  • Recruitment agencies, background verification agencies
  • Professional social networks and referrals

Purpose of ProcessingSsquad processes personal data to:

Deliver and continuously enhance our services and solutions

  • Fulfil contractual and pre-contractual obligations
  • Comply with legal and regulatory requirements
  • Foster effective communication and collaboration with clients and partners
  • Administer human resource and recruitment activities
  • Detect, prevent, and respond to fraud, security threats, and misconduct
  • Safeguard our IT systems and ensure service continuity

Disclosure of Personal Data

Personal data may be shared with:

  • Subsidiaries and corporate affiliates
  • Trusted third-party service providers and business partners
  • Legal and regulatory authorities, as required
  • Entities involved in mergers, acquisitions, or corporate restructuring

We do not sell or lease your personal data to third parties for marketing purposes.

Cross-Border Data Transfers

In providing our services, personal data may be transferred to and processed in jurisdictions outside your country of residence, including the United States, India, the United Kingdom, Australia, the European Union, Singapore, Malaysia, and other countries where Ssquad operates.

When transferring data internationally, Ssquad implements appropriate safeguards to ensure lawful and secure data handling, such as Standard Contractual Clauses under GDPR/UK GDPR or equivalent legal mechanisms under other applicable laws.

Data Retention

We retain personal data only for as long as necessary to:

  • Fulfil service obligations and contractual commitments
  • Meet statutory, regulatory, and tax-related requirements
  • Support ongoing business relationships
  • Defend against potential legal claims

Cookies & Tracking Technologies

We use cookies and similar technologies to:

  • Improve functionality and performance of our website
  • Personalize user experiences
  • Conduct usage analytics
  • Support the secure delivery of online services

You can manage your cookie preferences via your browser settings at any time.

Information Security

Ssquad employs industry-standard technical and organizational safeguards to protect personal data against unauthorized access, alteration, disclosure, or destruction. While we take every reasonable measure to secure your data, no system can be guaranteed to be 100% secure. Any transmission of personal data is undertaken at your own risk.

Your Privacy Rights

Depending on your jurisdiction, you may exercise the following rights:

EU / UK GDPR

  • Right to access your personal data
  • Right to rectify inaccuracies
  • Right to erasure (“right to be forgotten”)
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Right to lodge a complaint with your Data Protection Authority

USA (California – CCPA / CPRA)

  • Right to know what personal data is collected
  • Right to access personal data
  • Right to request deletion of personal data
  • Right to opt-out of sale (note: Ssquad does not sell personal data)
  • Right to non-discrimination for exercising privacy rights

Canada (PIPEDA)

  • Right to access your personal data
  • Right to correct inaccuracies
  • Right to withdraw consent (where applicable)

India (DPDP Act)

  • Right to access your personal data
  • Right to correct or delete your data
  • Right to data portability
  • Right to seek grievance redressal

Australia (Privacy Act & APPs)

  • Right to access personal data
  • Right to correct personal data
  • Right to lodge privacy complaints

How to Exercise Your Rights

You may exercise your privacy rights or submit inquiries by contacting us at:

privacy@ssquad.com

Ssquad will respond to such requests within the timelines required under applicable data protection laws.

Children’s Privacy

Ssquad’s services are not intended for, nor directed to, individuals under the age of 16. We do not knowingly collect personal data from minors. If you believe that we have collected personal data from a child, please contact us so we may take appropriate steps to delete such information.

Policy Updates

Ssquad reserves the right to amend or update this Privacy Policy to reflect evolving legal obligations and our data processing practices. The current version of this Privacy Policy will always be available on our website.

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact:

privacy@ssquad.com