Privacy Policy

This policy explains what personal data the Osintpro service collects, why, on what legal basis, how long it is kept and how to have it removed. Osintpro is the brand and the service operator, and it is the data controller for the personal data described here within the meaning of the UK and EU General Data Protection Regulation. Contact for any privacy matter, including a request to exercise the rights below: contact@osintpro.com.

What we collect

Only what the service needs to work.

• Your email address, when you sign up. This is the only field the signup form has.
• A confirmation code generated for that signup, and the time you confirmed it.
• The page and control that opened the signup, so we can tell which parts of the site are useful. This is a short label such as "pricing" or "demo-export", not a browsing history.
• Campaign parameters present in the URL you arrived on, where they exist.
• Your IP address at the moment of signup, for abuse prevention.
• Server logs generated by ordinary web serving, retained for 30 days for security and diagnostics.

We do not ask for your name, your company, your job title or your phone number, because we do not need them to send you a confirmation code.

What we never collect

• Third-party advertising or cross-site tracking cookies. There are none on this site.
• Behavioral profiles of visitors.
• Payment card details. We never store card numbers.
• Any special category personal data.

Why we collect it, and on what legal basis

Each purpose has one basis, and this is the whole list.

• Your email address, to send the confirmation code and the setup steps you asked for. Basis: your consent, given when you submit the form and confirm the code. You can withdraw it at any time, and withdrawing it does not affect processing that already happened.
• The source label and campaign parameters, to see which parts of the site are useful. Basis: our legitimate interest in understanding what works, balanced against a label that describes a page rather than a person.
• Your IP address at signup, to prevent abuse. Basis: our legitimate interest in keeping the signup from being used to send confirmation codes to people who did not ask for one.
• Server logs, for security and diagnostics. Basis: our legitimate interest in operating the service securely.

There is no processing for advertising, no profiling, and no automated decision-making that produces a legal or similarly significant effect on anyone.

How long we keep it

Signup records are kept until you ask us to remove them, or until you withdraw consent, whichever comes first. Server logs are kept for 30 days and then discarded. Case data created inside the platform is retained for the window on your plan, which is 12 months on Analyst, 24 months on Team, and configurable on Practice and Enterprise. The security page sets that out in full.

Where it is processed

Where a processor we use operates outside the United Kingdom or the European Economic Area, that transfer is covered by the European Commission's standard contractual clauses, with the UK international data transfer addendum where the UK GDPR applies. We will name the processors and the safeguard that covers each one on request, and we do not need you to have an account to answer that question.

Who else processes it

Our hosting provider processes data on our instructions in order to run the service, and our email provider processes your address in order to deliver the confirmation code. Both act as processors under contract. We do not sell personal data, we do not share it with advertisers, and we do not use it to train models.

The demo

The domain footprint demo on this site runs in your browser and queries public DNS and RDAP endpoints directly. Those requests go from your browser to those public services and are subject to their own policies. The demo accepts a domain and has no input that accepts a person. If a language model writes the optional summary paragraph, it receives only the findings already shown on your screen, and never your identity.

Your rights

Depending on where you live you have some or all of the following rights over the personal data we hold about you:

• Access, a copy of what we hold and what we do with it.
• Rectification, correction of anything inaccurate.
• Erasure, deletion of your record.
• Restriction, a pause on processing while something is in dispute.
• Objection to processing we base on legitimate interest, including the source label and the abuse-prevention record.
• Portability, a copy in a structured, machine-readable form.
• Withdrawal of consent at any time, which for us means telling us to stop emailing you and delete the record.

Write to contact@osintpro.com and we will action it within one month. There is no form to fill in and no account required to ask, and we will not charge you for it.

If you are in the UK or the EU and you believe we have handled your data badly, you may complain to your national supervisory authority. We would rather you told us first so we can fix it.

Cookies

This site sets a session cookie required for the signup to work, and nothing else. There is no advertising cookie, no analytics cookie and no third-party pixel, which is why there is no cookie banner covering the page.

Changes

If this policy changes materially we will update the date at the top and, where the change affects people who have signed up, tell them by email.

Contact

Privacy questions and deletion requests: contact@osintpro.com. Security and vulnerability reports: security@osintpro.com. Also see the terms of service and the security page.