Legal
Privacy Policy
Last updated:
Open Security Inc (“Open Security,” “we,” “us,” or “our”) operates the website at https://opensecurity.com (the “Site”). This Privacy Policy describes how we collect, use, disclose, and protect personal information in connection with the Site.
This Privacy Policy applies to the Site only. Open Security’s cybersecurity products, platforms, and professional services are governed by separate agreements and, where applicable, separate privacy terms.
Contact: contact@opensecurity.io
Mail: Open Security Inc, 12016 Alamo Ranch Pkwy, Suite 104, San Antonio, TX 78253
1. Scope and audience
The Site is intended for business and professional users. It is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided personal information to us through the Site, contact us at contact@opensecurity.io and we will delete it.
Our Cookie Notice describes cookies and similar technologies used on the Site. Our Terms of Use govern use of the Site.
2. Notice at collection
At or before the time we collect personal information, we provide this notice of the categories of personal information we collect, the sources of that information, the business or commercial purposes for which we collect it, whether we sell or share it, the categories of third parties to whom we disclose it, and how long we retain it.
| Category of personal information | Examples | Sources | Business / commercial purposes | Sold or shared? | Categories of third parties | Retention |
|---|---|---|---|---|---|---|
| Identifiers | Name, email address, phone number, company name, job title, IP address, cookie and device identifiers | You (forms, meetings, email); automatically from your device and browser; service providers that support the Site | Respond to inquiries; operate CRM and sales processes; send communications you request or that are permitted by law; operate, secure, and improve the Site; analytics; B2B visitor identification; advertising measurement and cross-context behavioral advertising where tools described in this policy are used | Yes — see Section 5 and Your Privacy Choices | Service providers and vendors (including HubSpot, Google, Microsoft, RB2B, and Cloudflare); advertising and analytics providers; professional advisors; authorities as required by law | See Section 8 |
| Customer records / commercial information | Records of inquiries, interest in offerings, meeting requests, and related communications | You; our systems | Respond to and manage inquiries; improve offerings; internal business operations | No, except to the extent identifiers or internet activity associated with an inquiry are sold or shared as described in Section 5 | Service providers; professional advisors; authorities as required by law | See Section 8 |
| Internet or other electronic network activity | Pages viewed, links clicked, referring URLs, browsing interactions, session information, approximate location derived from IP address | Automatically via cookies, scripts, pixels, and logs | Site analytics; security and performance; product interest analysis; B2B visitor identification; advertising measurement and cross-context behavioral advertising | Yes — see Section 5 and Your Privacy Choices | Analytics, advertising, visitor-identification, hosting, and security providers (including Google, Microsoft Clarity, RB2B, HubSpot, and Cloudflare) | See Section 8 |
| Professional or employment-related information | Employer, role, and related business contact details | You; RB2B matching where available | B2B outreach and qualification; CRM | Yes, when derived from or combined with Site activity sold or shared as described in Section 5 | Service providers; RB2B; professional advisors | See Section 8 |
| Inferences | Inferences about interest in pages, content, or offerings | Derived from Site activity and CRM records | Improve the Site and sales follow-up; advertising measurement | Yes, when used or disclosed in connection with the sale or sharing described in Section 5 | Analytics and advertising providers; service providers | See Section 8 |
Sensitive personal information. We do not intentionally collect sensitive personal information (as defined under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, and similar laws) through the Site. Do not submit passwords, government identification numbers, financial account credentials, or similar sensitive information through Site forms. Because we do not collect sensitive personal information through the Site, the right to limit the use and disclosure of sensitive personal information does not currently apply to Site data.
3. Information you provide
We collect personal information you submit through the Site, including:
- Contact and inquiry forms (including
/contact/) - Product or asset-related forms (including
/platform/aludra/launch/) - Event-related forms (including
/events/simplify-2026/) - Meeting requests and bookings made through HubSpot Meetings links on the Site.
- Email sent to contact@opensecurity.io or other published Open Security addresses
Typical fields include name, work email address, telephone number, company, role, and message content. The fields presented on each form control what we collect.
By submitting a form, you agree to this Privacy Policy. We use the information to respond to your request. Where we send marketing emails, you may unsubscribe at any time using the link in those emails or by contacting us. If you are in the EEA, United Kingdom, or Switzerland and we offer optional marketing, we will ask for your consent through an unticked checkbox before sending marketing communications.
4. Information collected automatically
When you visit the Site, we and our service providers may automatically collect device and usage information, such as IP address, browser type, device type, pages viewed, timestamps, referring URL, and approximate location derived from IP address. We use cookies and similar technologies as described in our Cookie Notice.
5. Sale and sharing of personal information; analytics and advertising tools
We do not sell personal information for money. Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), and similar U.S. state laws, “sale” and “sharing” include certain disclosures of personal information to third parties for cross-context behavioral advertising or other valuable consideration.
In the preceding 12 months, we have sold or shared the following categories of personal information for cross-context behavioral advertising and related analytics and advertising purposes: identifiers and internet or other electronic network activity information (and, where applicable, related professional information and inferences). We have sold or shared these categories with the following categories of third parties: analytics providers, advertising providers, and visitor-identification providers, including through the tools described below.
We use the following tools on the Site:
HubSpot
We use HubSpot for marketing automation, CRM, forms, meetings scheduling, and website tracking. HubSpot may set cookies and collect usage information as described in our Cookie Notice and HubSpot’s privacy materials.
Google Analytics 4 and Google Ads
We use Google Analytics 4 (“GA4”) to measure Site usage. Our GA4 property is linked to Google Ads. GA4 and related Google advertising features may collect identifiers and internet activity and may use that information for analytics, advertising measurement, and cross-context behavioral advertising. Google may set cookies such as _ga, _ga_<container-id>, and _gcl_au. Learn how Google uses information from sites that use its services at https://policies.google.com/technologies/partner-sites. You may install the Google Analytics opt-out browser add-on at https://tools.google.com/dlpage/gaoptout.
Microsoft Clarity
We use Microsoft Clarity to collect behavioral metrics, heatmaps, and session recordings to help us understand how visitors use the Site. Clarity uses first-party and third-party cookies and similar technologies. We configure Clarity to mask sensitive content using Strict masking. For information about Microsoft’s practices, see the Microsoft Privacy Statement.
RB2B
We use RB2B for business visitor identification. For visitors located in the United States, RB2B may identify business visitors at a person level. For visitors located outside the United States, RB2B is used for company-level identification only; RB2B does not provide person-level profiles for non-U.S. visitors through this use.
When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email. We (or service providers on our behalf) may then send communications and marketing to these email addresses. You may opt out of receiving this advertising by visiting https://app.retention.com/optout. You also have the option to opt out of the collection of your personal data in compliance with GDPR by visiting https://www.rb2b.com/rb2b-gdpr-opt-out.
If you are in the EEA, United Kingdom, or Switzerland, RB2B is used only after you consent to the applicable cookies and similar technologies.
Cloudflare
The Site is hosted and delivered using Cloudflare. We also use Cloudflare Web Analytics, which Cloudflare describes as not using cookies or localStorage for that product’s metrics. Cloudflare may process request data for hosting, security, and performance.
Google Fonts
We load fonts from Google’s servers, which may receive your IP address and user-agent when fonts are requested.
We have no actual knowledge that we sell or share the personal information of consumers under 16 years of age.
You may opt out of the sale or sharing of personal information as described in Your Privacy Choices.
6. How we use personal information
We use personal information to:
- Provide, operate, secure, and improve the Site
- Respond to inquiries and schedule conversations
- Maintain CRM records and related business communications
- Measure Site performance and understand visitor interest
- Conduct analytics and advertising measurement, including through GA4 and Google Ads
- Identify business visitors for B2B sales and marketing (including through RB2B)
- Send marketing communications where permitted (with unsubscribe available)
- Detect abuse, fraud, and security incidents
- Comply with law and enforce our Terms of Use
7. How we disclose personal information
We disclose personal information to:
- Service providers and contractors that host, secure, analyze, or support the Site and our sales and marketing operations (including HubSpot, Google, Microsoft, RB2B, and Cloudflare), subject to contractual restrictions where required
- Advertising and analytics providers, as described in Section 5
- Professional advisors (such as legal and accounting advisors) under confidentiality obligations
- Public authorities when required by law or to protect rights, safety, or security
- Parties to a business transaction, such as a merger, acquisition, financing, or sale of assets, subject to applicable law
8. Retention
Subject to applicable law, we retain personal information for as long as needed to fulfill the purposes for which we collected it and for a reasonable period thereafter to comply with audit, contractual, or legal requirements, or where we have a legitimate interest in doing so. We may retain aggregated or de-identified information to the extent permitted by law. We may retain personal information in backup or archival systems generated in the ordinary course of business until those copies are deleted in accordance with our retention practices.
9. Your Privacy Choices
Do Not Sell or Share / Your Privacy Choices
You have the right to opt out of the sale or sharing of your personal information. To exercise that right:
- Use the Your Privacy Choices link on the Site; or
- Enable a browser-based opt-out preference signal, such as the Global Privacy Control (“GPC”).
When we detect a GPC signal, we treat it as a valid request to opt out of sale and sharing for that browser or device and associated pseudonymous profile, and we will indicate that the opt-out request has been honored.
Your Privacy Choices and a detected Global Privacy Control signal also tell HubSpot not to collect analytics or keep HubSpot analytics identifiers in that browser from then on. A request already sent may still complete. This does not delete information HubSpot already stored. Turning that choice off does not allow a HubSpot cookie category you denied. Cookie Settings is where those categories are changed.
You may also use vendor-specific opt-outs, including:
- RB2B advertising association: https://app.retention.com/optout
- RB2B GDPR opt-out (international company-level identification): https://www.rb2b.com/rb2b-gdpr-opt-out
- Google Analytics opt-out browser add-on: https://tools.google.com/dlpage/gaoptout
Cookie Settings
Use Cookie Settings in the Site footer (or banner) to manage HubSpot cookie category preferences.
Marketing emails include an unsubscribe link. You may also email contact@opensecurity.io.
10. U.S. state privacy rights
Depending on where you live and whether we are subject to applicable law, you may have the right to:
- Know / access the personal information we collect, use, disclose, sell, or share about you
- Delete personal information we collected from you, subject to legal exceptions
- Correct inaccurate personal information
- Opt out of the sale or sharing of personal information and of targeted advertising
- Limit the use and disclosure of sensitive personal information (not applicable to Site data because we do not collect sensitive personal information through the Site)
- Appeal a denial of a request, where required by law
- Use an authorized agent to submit a request, subject to verification
- Not be discriminated against for exercising privacy rights
How to submit a request. Email contact@opensecurity.io with “Privacy Request,” your name, the email address you used with us, and the type of request. We will verify your identity as required by law and respond within the time required by law. Authorized agents must provide proof of authority.
We do not knowingly sell or share personal information of consumers under 16.
11. Security
We use reasonable administrative, technical, and organizational measures designed to protect personal information. No method of transmission or storage is completely secure.
To report a security vulnerability affecting the Site, contact contact@opensecurity.io. See also our Terms of Use.
12. Visitors in the EEA, United Kingdom, and Switzerland
Open Security Inc is the controller of personal information collected through the Site. Our contact details appear in Section 15.
If you are located in the European Economic Area (“EEA”), the United Kingdom, or Switzerland, the EU General Data Protection Regulation (“GDPR”), the UK GDPR, and/or the Swiss Federal Act on Data Protection (“FADP”), as applicable, may apply to our processing of your personal data.
Legal bases
Depending on the processing activity, we rely on one or more of the following legal bases:
- Consent, where required — for example, non-essential cookies and similar technologies (including analytics, advertising measurement, and Microsoft Clarity), and optional marketing emails where consent is required.
- Legitimate interests, where appropriate and not overridden by your interests — for example, responding to business inquiries, operating and securing the Site, understanding aggregate Site performance, and B2B communications with business contacts where permitted by law.
- Performance of a contract or steps prior to entering a contract — for example, handling a request you submit to obtain information about our services.
- Compliance with a legal obligation — where we must retain or disclose information to comply with law.
You may withdraw consent at any time (for example, through Cookie Settings or unsubscribe links) without affecting the lawfulness of processing before withdrawal.
Your data protection rights
Subject to applicable law, you may have the right to:
- Access your personal data
- Rectify inaccurate personal data
- Erase personal data
- Restrict processing
- Data portability
- Object to processing, including processing based on legitimate interests and processing for direct marketing
- Withdraw consent where processing is based on consent
- Not be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you — we do not make such automated decisions based on Site data
- Lodge a complaint with a supervisory authority in your country of residence, place of work, or place of an alleged infringement
To exercise these rights, contact contact@opensecurity.io. We will respond as required by applicable law.
International transfers
The Site is operated from the United States. If you access the Site from the EEA, United Kingdom, Switzerland, or elsewhere, your personal data may be transferred to and processed in the United States and other countries that may not provide the same level of data protection as your home country.
Where required, we use appropriate safeguards for such transfers, such as the European Commission’s Standard Contractual Clauses, the UK’s international data transfer addendum or equivalent UK transfer tools, and/or transfers to organizations that participate in the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and/or the Swiss-U.S. Data Privacy Framework, as applicable to our service providers. Copies or further information about the safeguards that apply to a particular transfer may be requested by contacting us.
Cookies and similar technologies
For visitors in the EEA, United Kingdom, and Switzerland, we ask for consent before setting non-essential cookies and similar technologies. You may withdraw consent at any time through Cookie Settings. See our Cookie Notice.
13. Third-party sites and services
The Site may link to or embed third-party sites and services, including HubSpot Meetings. Those third parties’ privacy practices are governed by their own policies. We are not responsible for third-party content or practices.
14. Changes
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will change when we do. Material changes may be highlighted on the Site or otherwise communicated when appropriate.
15. Contact
Open Security Inc
12016 Alamo Ranch Pkwy, Suite 104
San Antonio, TX 78253
Email: contact@opensecurity.io
Saved in this browser. Opt out stops future loads of Google Analytics, Microsoft Clarity, and RB2B here, and tells HubSpot not to collect analytics or keep HubSpot analytics identifiers in this browser from then on. It does not undo data those tools already received. A request already sent may still complete. Opting back in does not override Global Privacy Control or a denied HubSpot cookie category. Use Cookie Settings to allow a HubSpot cookie category you denied. Unchecking this box does not change those categories. Outside the United States, Google Analytics, Microsoft Clarity, RB2B, and HubSpot analytics stay off until the matching HubSpot category is allowed. RB2B identification outside the United States is company-level.