1. Who we are
Excavate provides insider threat investigations as a service. This notice explains how we handle personal information on excavate.ai: when you ask for a demo, write to us, or browse the site. Questions go to privacy@excavate.ai.
2. Information we collect
When you ask for a demo: your work email, name, role, company and phone number, and your company size and note if you give them. With your request we record the site that sent you here, any campaign tag on the link, and your time zone.
When you email us: your address and what you write.
We do not use analytics, advertising trackers or cookies.
3. How we use it
Only to reply to you, arrange and run the demo, and follow up on it. We do not sell it, share it for anyone else’s marketing, or use it to train any model.
4. Legal basis
Where data protection law such as the GDPR applies, we rely on our legitimate interest in answering requests you send us, and on taking steps you ask for before a possible contract.
5. Who we share it with
Only the providers that run the site and our email:
- Google, for the spreadsheet and the mailboxes that receive demo requests and email.
- Amazon Web Services, which hosts the website.
- Google Fonts and Fontshare, which serve the site’s fonts and see your IP address the way any server you load a page from does.
We do not sell personal information.
6. International transfers
These providers may process information outside your country, including in the United States, under their standard data protection terms.
7. How long we keep it
We keep your request and our correspondence while we are in conversation with you, and delete them when you ask.
8. Security
The site and the demo form use encrypted connections (TLS). Access to demo requests is limited to the people who answer them.
9. Cookies and browser storage
The site sets no cookies. If you type your email on the homepage, it is carried to the demo form in your browser’s session storage, never in a link. The page you arrived on and the site that sent you are kept there too, and leave your browser only with a request you send. Session storage clears when you close the tab.
10. Your rights
You can ask to see, correct or delete the information we hold about you, ask us to restrict or stop using it, or ask for a copy. Write to privacy@excavate.ai and we will answer within 30 days.
If you are in the EU or the UK, you can also complain to your data protection authority. If you are in California, you have the right to know what we hold and to have it deleted, and we do not sell or share personal information.
11. Children
This site is meant for businesses and is not directed at anyone under 16.
12. Data we process for customers
This notice covers the website only. Data we process inside Excavate coverage belongs to our customers and is governed by our agreement with them. If you work for a customer and have a question about your data, ask your employer, and we will help them answer it.
13. Changes to this notice
When this notice changes, we update the date at the top of the page.