Privacy

Breach Watch is run by SE Digital Transformation. This page explains what we keep and why.

What we store

Your name, company, contact email, company domain, the staff email addresses you add, and the breach results for those addresses. Payments are handled by Stripe; we never see or store card numbers.

How we use it

Once a day each staff address is sent to Have I Been Pwned (haveibeenpwned.com) to check it against known data breaches. We use the results only to show your dashboard and send your alerts and reports. We don't sell or share your data, and we don't email your staff.

Who can see results

Only people who can sign in with your account's email. You must prove you control the domain before any results are checked, so nobody can monitor a domain that isn't theirs.

Deleting your data

Remove any address from your dashboard at any time and its results are deleted with it. To delete your whole account, email support@sedigitaltransformation.com. We delete it within 30 days of your request or of your subscription ending.

Breach data from Have I Been Pwned, licensed under Creative Commons Attribution 4.0.