IronNet

Privacy Statement Overview

Last updated: June 12, 2023

Applies to: IronNet’s customers, website visitors, event participants, office visitors, communications, and users of its services. It does not cover employee or contractor HR data.

1. Data Collection & Usage

IronNet may collect:

• Identity and business information: name, job title, organization, address, email, phone number, and company details.
• Account and payment data: login information, IP address, credit-card and other billing information.
• Service and support data: information submitted when using Security Services, IronRadar, free trials, or support portals. Customer logs may be provided for threat analysis.
• Device and usage data: IP address, location, browser, operating system, device identifiers, pages viewed, searches, timestamps, clickstream data, and interactions with emails.
• Communications data: phone numbers, call dates, duration, and call type.
• Office security data: visitor registration details and video images captured in and around offices.
• Marketing and profiling data: information obtained from data brokers and other third parties, including social-media profiles, LinkedIn URLs, intent/behavior data, and business contact information.
• Community or development data: usernames associated with GitHub or other repositories.

Purposes include providing and securing services, processing payments, responding to requests, managing events, improving websites and services, conducting analytics, targeted advertising, direct marketing, fraud/security investigations, and complying with legal obligations. IronNet relies on contracts, legitimate interests, consent, and legal requirements, depending on the activity.

Important risk: The statement permits extensive marketing profiling and use of third-party data sources. It does not specify precise retention periods; retention is determined case-by-case based on purpose, sensitivity, legal requirements, and business needs.

2. User Rights

Depending on applicable law—especially if you are in the EEA, the UK, Switzerland, or another jurisdiction with similar protections—you may have the right to:

• Access your Personal Data
• Correct inaccurate or incomplete data
• Request deletion
• Restrict processing
• Obtain data portability
• Object to legitimate-interest processing
• Object to direct marketing without giving a reason
• Withdraw consent
• Avoid decisions based solely on automated processing

IronNet states that automated decision-making is not currently used on its websites. Its Digital Verify Service may evaluate social-media followers, but IronNet says this is only a good-faith assessment and should not be used alone for decisions.

Requests should be sent to privacy@ironnetcybersecurity.com. IronNet generally aims to respond within one month, although complex requests may take longer. If the data comes from an IronNet customer, that customer is generally the controller and should receive the request first.

3. Third-Party Sharing

IronNet may share data with:

• Service providers for hosting, IT, payment processing, analytics, marketing, support, and data enrichment
• Affiliates organizing events
• Event, webinar, or contest sponsors
• Social-media networks, advertising networks, and third-party websites
• Professional advisers such as lawyers, auditors, insurers, and bankers
• Government authorities, courts, or regulators when legally required
• A purchaser or successor during a merger, restructuring, sale, or acquisition

Event and advertising recipients may act as separate controllers under their own privacy policies. Information posted in community areas, conference chats, or similar forums may be visible to other participants.

Data may be transferred internationally, including to the United States, Japan, and the United Kingdom. IronNet may use EU Standard Contractual Clauses or similar safeguards, but international transfers still create differing legal-protection and government-access risks.

4. AI/ML Training

The statement does not expressly say that Personal Data is used to train artificial-intelligence or machine-learning models. It permits analytics, profiling, service improvement, threat analysis, and personalized advertising, but does not provide a specific AI-training commitment or prohibition. Users should obtain clarification if AI-model training is a concern, particularly regarding customer logs or threat data.

5. Key User Obligations

Users are responsible for:

• Protecting passwords and limiting device access
• Signing out of services
• Having authority before submitting another person’s Personal Data
• Choosing whether to allow cookies, marketing, event-sponsor sharing, or badge scanning
• Avoiding confidential or sensitive information in public communities or conference chats

Free-trial participants must forward information for analysis. IronNet expressly does not promise to remediate or mitigate threats found in submitted logs.

6. Liability & Disputes

The statement says security measures are used but acknowledges that no storage or transmission method is completely secure. It does not provide a specific financial liability cap, warranty disclaimer, indemnity, governing-law clause, arbitration requirement, or exclusive court venue.

Privacy complaints may be submitted to IronNet. EEA individuals may also complain to their data-protection supervisory authority. The statement does not establish a separate dispute-resolution process beyond these channels.

7. Changes

IronNet may change the statement to reflect legal, technological, or operational developments. Changes will be posted on its public websites, and the effective date at the top will be updated. The policy does not promise individualized notice, so users should periodically review it.

Terms of Use Overview

*Last updated: December 30, 2019*

These Terms govern use of IronNet’s website, not necessarily its products or services. Product-specific agreements may impose additional terms.

1. Data Collection and Usage

The Terms themselves do not describe what personal information IronNet collects, how it is used, retention periods, or security measures. Instead, they refer users to a separate Privacy Statement, which reportedly explains:

• Types of information collected when visiting the website or using products/services
• Reasons for collecting the information
• How IronNet safeguards it

Because that Privacy Statement is not included here, users cannot determine from these Terms alone whether IronNet collects information such as contact details, IP addresses, cookies, device data, usage analytics, or communications.

Practical implication: Review the separate Privacy Statement before providing personal information or using IronNet services.

2. User Rights

These Terms provide no specific privacy rights, such as rights to:

• Access or obtain a copy of personal data
• Correct or delete information
• Opt out of marketing or certain data uses
• Restrict processing or object to processing
• Receive data in a portable format

Any such rights would need to come from the Privacy Statement or applicable privacy laws. The Terms also do not explain how to submit a privacy request.

3. Third-Party Sharing

The Terms do not explain whether IronNet shares personal information with vendors, service providers, affiliates, business partners, government authorities, or other third parties. They only address links to third-party websites:

• Links are provided for convenience.
• IronNet does not control, sponsor, endorse, or affiliate with those sites.
• IronNet is not responsible for their content, products, or representations.
• Visiting linked sites is entirely at the user’s own risk.

Third-party websites may have different privacy practices, so users should review their policies separately.

4. AI/ML Training

The Terms contain no provision stating whether user data, website content, communications, or product data is used to train artificial-intelligence or machine-learning models.

Accordingly, this document does not grant users an express opt-out or provide assurances that their data will not be used for AI/ML training. The answer may be addressed in the separate Privacy Statement or product-specific agreements.

5. Key User Obligations and Restrictions

Users receive only a limited, revocable, non-exclusive, non-transferable license to access the website for personal use.

Unless IronNet gives written permission, users may not:

• Copy, reproduce, publish, transmit, resell, or commercially exploit website content
• Link to internal website pages; only linking to the homepage is allowed
• Use or export content, products, or services in violation of applicable laws, including U.S. export laws
• Treat website materials as a license to IronNet copyrights, trademarks, or other intellectual property

Users should assume website content is proprietary unless stated otherwise. IronNet may change or discontinue website features, content, products, or services without notice, and website information may become outdated.

6. Liability and Disputes

The website is provided “as is.” To the fullest extent allowed by law, IronNet disclaims express and implied warranties, including merchantability, fitness for a particular purpose, and non-infringement.

IronNet also disclaims liability for indirect, special, consequential, or incidental damages arising from:

• Use or inability to use the website
• Use of IronNet products
• Reliance on website information

The Terms do not state a specific monetary liability cap. Mandatory legal protections may limit the effectiveness of these disclaimers in some jurisdictions.

Disputes are governed by U.S. federal law and New York law, without conflicts-of-law principles. Users consent to jurisdiction and venue in state and federal courts in New York County, New York, and waive objections to that location. There is no arbitration or class-action waiver in these Terms.

7. Changes to the Terms

IronNet may change the Terms at any time without notice. Users are responsible for checking periodically. Continued website use after changes are posted constitutes acceptance.

Practical risk: Users may be bound by revised terms without receiving direct email or other individualized notice.