Privacy Policy

This Privacy Policy describes how Centrasprit ("Centrasprit," "we," "us") handles information in connection with our website and the AI-powered security services we are building. This is a working policy for an early-stage product and will be reviewed and updated as our services develop and as legal counsel completes formal review.

We collect information you provide directly to us, such as when you complete the Get Started form (name, work email, organization, and related details), and information generated through your use of our services, once those services are active for your organization.

Where an organization connects Centrasprit to its systems, we may process security-relevant signals such as login events, device identifiers, network metadata, and application activity, strictly for the purpose of detecting and investigating potential threats.

We collect information needed to create and administer accounts for authorized users within a customer organization, such as name, email address, and role.

We collect information about the organization itself — for example, organization type, size, and the systems it has connected — to configure and operate Centrasprit for that organization.

Where authorized by a customer organization, Centrasprit may analyze email and related security data to identify indicators associated with phishing, account compromise, and similar threats. Access to this data is scoped to what is required for detection, investigation, and response.

We use information to operate and improve Centrasprit, detect and investigate potential security incidents, generate explanations and recommendations, communicate with you about your account or inquiry, and meet legal and security obligations.

Centrasprit uses AI models to analyze security signals, correlate events, and generate plain-language explanations and recommendations. AI processing is scoped to security-relevant data and is subject to the access controls and retention limits described in this policy. We do not use customer security data to train AI models for other customers.

We do not sell personal information. We may share information with service providers who help us operate Centrasprit, subject to confidentiality obligations, or where required by law.

Where an organization authorizes an integration with a third-party system (for example, an email or identity provider), that integration operates under the terms and permissions granted by the organization, and is limited to what is necessary for Centrasprit to function.

We apply technical and organizational measures designed to protect information, including encryption, access controls, and audit logging. No system can be guaranteed to be completely secure, and we continue to invest in improving our safeguards.

We retain information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods for specific categories of security data are configured with each organization.

Our website may use cookies or similar technologies for essential functionality and to understand how the site is used. You can control cookies through your browser settings.

Information may be processed in countries other than your own. Where this occurs, we take steps intended to ensure information receives an appropriate level of protection.

Depending on your location, you may have rights to access, correct, or delete your personal information, or to object to certain processing. To make a request, contact us using the details below.

We may update this Privacy Policy as our services evolve. We will update the "Last updated" date above when changes are made.

Questions about this Privacy Policy can be directed to privacy@centrasprit.com.