How SternSleuth protects customer and researcher data

We collect information you provide when you register interest, create an account, subscribe, launch a validation workflow, or contact SternSleuth. This can include name, work email, company, role, primary domain, workspace settings, billing status, and security workflow details that you choose to submit.

For validation workflows, SternSleuth may store customer-approved domains, assets, scan/job state, validation findings, evidence references, reports, and operational notes needed to deliver the service.

We use information to operate the SternSleuth platform, process registrations, provide exposure validation, manage VDP or BBP workflows, route researcher signals, support billing, secure accounts, prevent abuse, and communicate service updates.

Webinar registration details may be used to confirm your RSVP and send the webinar link, calendar updates, and follow-up material related to the requested event.

SternSleuth may use payment, email, hosting, analytics, authentication, and infrastructure providers to deliver the service. Payment card or bank details are processed by the payment provider and are not intentionally stored in SternSleuth application records.

We use essential cookies and similar technologies for sign-in, workspace sessions, abuse prevention, rate limiting, and security controls such as Cloudflare Turnstile. Optional analytics or product telemetry may be used to improve reliability and user experience.

We do not sell personal information. We share data only with service providers, authorized workspace users, researchers or analysts involved in an approved workflow, or where required for legal, security, or payment compliance reasons.

We retain account, billing, workflow, and security evidence records for as long as needed to provide the service, meet compliance obligations, resolve disputes, prevent abuse, and maintain auditability.

For privacy questions, correction requests, or deletion requests, contact founder@sternsleuth.dev.