This Privacy & Cookies Policy explains how IQBLACK (also “iQBlack”, “iQB” or “IQB”) collects, uses, stores and protects information when you visit our websites or use the iQBlack Threat Intelligence Platform, applications, intelligence modules and related services (collectively, the “Services”). Some Services may present an additional product-specific privacy notice at the point of access; that notice supplements this Policy for the relevant workflow. Questions: [email protected].

1. INFORMATION WE COLLECT

We may collect (a) account and organization information you provide, such as name, email, organization fields, role and access metadata; (b) information submitted through contact, newsletter or support forms; (c) security and operational logs needed to protect the Services, such as authentication events, abuse-prevention signals and diagnostic telemetry; (d) technical data generated by your browser or device, such as IP address, user-agent, timestamps, referrer and session identifiers; and (e) content you submit to authorized private or tenant-scoped workspaces.

2. HOW WE USE INFORMATION

We use information to provide and operate the Services, authenticate and authorize access, protect accounts and prevent abuse, maintain auditability and reliability, provide support, respond to inquiries, improve performance, comply with legal obligations, and send service notices or marketing communications where you have requested or consented to them.

3. PRIVATE CONTENT AND PRODUCT-SPECIFIC DATA

Private and tenant-scoped content is intended to be accessible only within the authorized scope defined by the relevant Service. Some Services use purpose-built workflows for data that requires additional handling controls. For example, SIGNAL presents its own privacy notice and acceptance flow before functional access. Product-specific notices describe the handling applicable to those workflows and should be read together with this Policy.

Do not send PAN, passwords, MFA secrets, API secrets or other authentication material through general public contact, newsletter or support forms unless an expressly authorized workflow instructs you to do so.

4. SERVICE PROVIDERS, LEGAL REQUESTS AND SECURITY DISCLOSURES

Information may be processed by hosting, infrastructure, security, communications or other technical providers needed to operate and protect the Services under applicable arrangements. We may also access, preserve or disclose information where required by a valid legal obligation, where necessary to enforce applicable terms, investigate abuse or protect rights and security, or where authorized by the customer.

5. COOKIES, LOCAL STORAGE AND OPTIONAL ANALYTICS

We use technical cookies or similar storage for functions such as language preference, consent preference, sessions and authentication. Optional basic analytics are activated only after you accept analytics through the cookie control. If you reject or close the analytics prompt, optional analytics are not intentionally activated, although security, abuse-prevention and operational logs that are necessary to provide or protect the Services may still be processed. You can also manage or clear cookies and local storage through your browser settings; disabling essential storage may prevent some features from functioning correctly.

6. DATA RETENTION

We retain information for as long as reasonably necessary for the purpose for which it was collected and for operational, security, audit, contractual or legal requirements. Retention periods may differ by data type and Service. Product-specific notices or agreements may define additional retention rules.

7. SECURITY

We implement reasonable administrative, technical and organizational measures intended to protect information under our control. No system is completely secure. Users remain responsible for safeguarding credentials and maintaining reasonable security on devices and environments used to access the Services.

8. INTERNATIONAL PROCESSING

Depending on hosting, service providers and operations, information may be processed in locations outside your country. Where required, we take measures intended to protect information in accordance with applicable law and contractual obligations.

9. YOUR CHOICES AND RIGHTS

Depending on applicable law and your relationship with IQBLACK, you may have rights concerning access, correction, deletion, restriction, objection or other processing choices. Requests should be sent through the support or commercial channel associated with your account or to the contact below. Marketing communications may be declined through the mechanism provided with the communication when applicable.

10. CHILDREN

The Services are intended for professional and organizational use and are not directed to minors. We do not knowingly solicit personal information from minors through the Services.

11. CONTACT AND POLICY UPDATES

Privacy questions or requests may be sent to [email protected]. We may update this Policy as the Services, operational practices or applicable requirements change. Material product-specific changes may also be communicated through the relevant Service.

Last updated: October 1, 2026.