Privacy Policy

This Privacy Policy describes how Hound, a Fauna AI company ("we," "us," or "our"), collects, uses, and protects information. It applies when you use our website, platform, reports, communications, or other Hound services that link to this policy. We call these the "Service" below.

This policy applies to individuals who use the Service, whether on their own behalf or on behalf of an organization. References to "your information" include both personal information and business information you provide.

1. Information We Collect

Contact and Intake Information: When you interact with Hound, we may collect contact, domain or target, and organization information, plus communications with us.

Payment Information: If you purchase paid services, payment and billing information may be collected and processed through third-party payment processors or invoicing providers. We may receive transaction, invoice, payment status, contact, and billing metadata needed to manage paid services. We do not store full payment card details on our servers.

Service Data: When we provide the Service, our systems may process information from systems you authorize us to assess or test, authentication materials you provide or authorize, and artifacts generated while providing the Service.

Usage Information: We may collect information about how you interact with the Service, including IP addresses, browser type, and usage patterns.

2. How We Use Your Information

We use your information to:

• Provide and operate the Service
• Verify domain ownership and authorization for assessment or testing
• Generate and deliver requested outputs
• Process payments, invoices, and related commercial communications
• Communicate with you about the Service, including support and updates
• Improve and develop the Service and user experience
• Create anonymized, aggregate statistics that cannot reasonably identify a specific customer
• Comply with legal obligations

Legal Basis for Processing (EEA/UK Users): If you are located in the European Economic Area or the United Kingdom, our legal bases for processing your personal data are:

• Contractual necessity: Processing information needed to deliver the Service you requested
• Legitimate interest: Using limited analytics, aggregate statistics, ad conversion measurement, and security logs to improve and protect the Service
• Legal obligation: Retaining certain data where required by applicable law

3. AI and Your Data

Our Service uses artificial intelligence to perform security review, testing, and analysis. We want to be clear about how your data is handled:

Your data is not used to train or improve any AI models. Our third-party AI providers are bound by terms that prohibit the use of your data for model training or improvement.

4. Data Storage and Security

Hound stores Service data using Amazon Web Services (AWS) infrastructure in the United States and may process Service data in operator review environments as needed to provide and manage the Service. Third-party providers may process information as described in this policy.

We designed our infrastructure to separate customer Service data at the network, compute, and storage layers:

• Encryption of data at rest and in transit
• Per-run isolation: Service runs use dedicated cloud infrastructure, provisioned fresh and destroyed after the run completes
• Domain-specific artifact buckets: Service artifacts and related run data for each domain are stored in a dedicated cloud storage bucket for that domain
• Run- and workflow-specific artifact areas: inside each domain bucket, each Service run has its own dedicated storage area. Assessment, engagement, and retest artifacts and related run data are stored in separate workflow areas
• Scoped access controls: bucket policies and role-based access controls restrict access by domain, run, and workflow. Hound systems and authorized operators receive only the access needed to provide, review, secure, support, retain, or delete the Service
• Audit logging of network activity and infrastructure lifecycle events

In the event of a security incident that affects your personal information, we will notify affected users and relevant authorities as required by applicable law.

5. Data Retention

We keep information only as long as we need it to provide the Service, comply with the law, protect Hound and our customers, resolve disputes, enforce agreements, or keep business records. If you request deletion of your data, we will process your request in accordance with the "Your Rights" section below.

Upon a verified deletion request, we will delete your personal data within 30 days, except where retention is required by law or necessary to resolve disputes or enforce our agreements.

We take reasonable measures to ensure that anonymized, aggregate data cannot be linked back to any individual or account. Such data is not subject to deletion requests.

6. Third-Party Services

We use third-party service providers only as needed to operate the Service and deliver requested work. Depending on how you use the Service, those providers may process information for:

• Cloud Infrastructure: Amazon Web Services (AWS) hosts and secures Service data as described in Section 4
• AI Analysis: Third-party AI providers help perform security review, testing, and analysis
• Communications: Providers help send Service-related messages
• Request Protection: Anti-abuse providers help verify assessment requests and prevent spam or misuse
• Payments: Payment processors handle payments and invoices when you purchase paid services
• Anonymous Analytics: Plausible Analytics provides aggregate website usage metrics without cookies or personal data

Where these providers process your information, they may use it only for the purposes we authorize and must protect it under their applicable terms or agreements with us.

We may also disclose your information when required by law, such as in response to a subpoena, court order, or other legal process, or when we believe disclosure is necessary to protect our rights, protect your safety or the safety of others, or investigate fraud.

7. Cookies and Tracking

We use Plausible Analytics for website usage statistics. Plausible is a privacy-focused analytics tool that does not use cookies, does not collect personal data, and does not track you across websites. It generates only anonymous, aggregate metrics that cannot be used to identify individual visitors.

We also use Google Ads and LinkedIn Ads to measure ad performance. These services may use cookies or similar technologies.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal information under applicable data protection laws (including the GDPR and CCPA):

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your personal data
• Export: Request a portable copy of your data
• Opt-Out of Sale: We do not sell your personal information

To exercise any of these rights, please contact us at support@cyberhound.ai. We will respond to your request within 30 days, or as otherwise required by applicable law.

9. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Users

The Service is operated from the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States.

Where required by applicable law, we use legally recognized transfer mechanisms for international personal data transfers, which may include Standard Contractual Clauses, applicable UK transfer addenda or agreements, and supplementary safeguards.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice through the Service. Your continued use of the Service after such changes is subject to the revised policy.

Contact

If you have questions about this Privacy Policy or our data practices, please contact us at support@cyberhound.ai.