Privacy Policy

1. Introduction

Konfydence is operated by PlanetHike OÜ ("we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit konfydence.com and use Konfydence or CoMaSy services.

2. Information We Collect

We may collect information about you in a variety of ways:

• Information you provide directly: Name, email address, organisation name and other details submitted through contact or pilot-request forms.
• Free-resource requests: Email address, the scam-safety resources selected, source page and whether you separately requested occasional marketing communications.
• CoMaSy pilot-request information: Role, organisation size, primary objective, current awareness platform, notes, consent and campaign/source attribution where supplied.
• Challenge and programme responses: Answers to challenge or simulation scenarios and resulting training signals where the relevant service requires them.
• Purchase information: Email address, billing details and order information processed by Stripe for consumer purchases.
• Device and usage information: Technical information such as IP address, browser type and pages visited where collected by the service.
• Cookies and analytics: Analytics cookies are subject to the consent choices described in our Cookie Policy.

3. How We Use Your Information

We use information we collect for purposes including:

• Providing and improving Konfydence challenge and CoMaSy services.
• Delivering free scam-safety resources that you request.
• Sending scam-safety tips or other marketing communications only where you separately opt in.
• Responding to contact and CoMaSy pilot requests.
• Configuring and administering agreed pilots or customer programmes.
• Processing consumer purchases, invoices and subscriptions through Stripe.
• Sending account, purchase, pilot or service-related communications.
• Analyzing usage where analytics consent has been granted.
• Complying with legal obligations and protecting the service.

4. Legal Basis (GDPR)

Where the GDPR applies, the legal basis depends on the purpose and may include consent, performance of a contract or steps requested before entering a contract, legal obligations, and legitimate interests where appropriate. A request to receive a free resource is handled separately from optional marketing consent. Enterprise pilot processing may also be governed by a separate customer agreement and data-processing arrangement where required.

5. Data Retention

We retain personal information only for as long as necessary for the relevant service, legal obligation or agreed customer programme. Retention for enterprise pilots should be defined in the pilot scope or customer agreement where it differs from the general service. Existing consumer records may be retained for customer-service and statutory accounting/tax purposes as applicable.

6. Sharing Your Information

We do not sell personal information. We may share information with service providers that help us operate the website, deliver communications, host application data, process consumer payments, provide analytics after consent, or meet legal requirements. Brevo may process email addresses and delivery data for requested resource emails and, where separately opted in, marketing communications. Google Drive may host the downloadable resource files you choose. Pilot-specific subprocessors and deployment details should be confirmed for the agreed enterprise environment.

7. Your Privacy Rights

Where applicable, you may have rights to access, correct, delete, restrict or object to processing, receive portable data, and withdraw consent. To exercise a privacy right, contact privacy@konfydence.com.

8. CoMaSy Enterprise Pilots

A CoMaSy pilot may involve participant scenario responses and derived training signals. Before participant data is used, the customer and Konfydence should agree the required identifiers, reporting granularity, access model, retention/deletion expectations and any additional privacy or employee-representation requirements. See our CoMaSy Security & Privacy page for the current procurement-review framework.

9. Cookies

See our Cookie Policy for information about cookies and analytics consent.

10. Third-Party Links

Our website may contain links to third-party sites, including resource downloads hosted through Google Drive. We are not responsible for the privacy practices of external websites. Please review their policies before providing personal information.

11. Security

We use technical and organisational safeguards appropriate to the service. No internet transmission or storage method can be guaranteed to be completely secure. Enterprise customers should review deployment-specific safeguards and requirements before a pilot.

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be reflected on this page with an updated date.

13. Contact Us

For privacy questions or requests:

Operator: PlanetHike OÜ
Email: privacy@konfydence.com
Registered office: Järvevana tee 9, Tallinn, 11314, Estonia
Registration number: 80656111
See the Imprint for current legal and contact information.