Privacy Policy

When you create or use a WatchLayer account, contact WatchLayer Security, purchase a subscription, or otherwise interact with the service, you may provide information such as your name, email address, company name, account information, cloud platform information, subscription information, and information you choose to include in communications with WatchLayer.

Please do not submit passwords, private keys, access keys, authentication tokens, cloud credentials, or other sensitive authentication information through the public contact form.

WatchLayer processes information necessary to create and maintain customer accounts, authenticate users, associate users with customer environments, manage subscription status, provide access to purchased services, and support account administration.

WatchLayer uses third-party payment processing services to process subscription payments. WatchLayer may receive information related to a transaction or subscription, such as payment status, subscription status, billing interval, customer identifiers, and related transaction information. WatchLayer does not need to receive or store full payment-card numbers to provide the WatchLayer service.

When you access the WatchLayer website or services, WatchLayer and the service providers used to deliver, secure, and operate them may process technical information such as network information, browser or device information, request details, timestamps, authentication events, and security or operational logs.

Technical information may be used to operate, secure, troubleshoot, maintain, and improve the WatchLayer website and services.

When a customer connects a supported cloud environment, WatchLayer may process cloud resource, configuration, security, account, project, subscription, and related information necessary to provide supported cloud security visibility and findings.

WatchLayer may maintain security findings and related historical information so customers can understand current security conditions and how findings or cloud security conditions change over time.

Cloud connections and cloud security data are handled through authenticated WatchLayer services rather than through the public contact form.

WatchLayer uses controlled access designed to limit cloud permissions to those needed for supported WatchLayer functions. The permissions and technical requirements applicable to a particular cloud provider may differ based on the provider and supported capabilities.

WatchLayer may use information to provide and operate the service, authenticate users, manage customer accounts and subscriptions, process and reconcile billing status, connect supported cloud environments, generate and maintain security findings, provide security context and guidance, respond to inquiries and support requests, maintain security, troubleshoot problems, improve the service, and conduct legitimate business operations.

WatchLayer seeks to collect and process information that is reasonably necessary for these purposes.

WatchLayer uses administrative, technical, and operational safeguards appropriate to the nature of the information and services being provided.

WatchLayer's security approach includes controlled access, encryption where appropriate, tenant isolation, authentication controls, and efforts to minimize unnecessary collection and retention of information.

No system, network, software, or service can guarantee absolute security.

WatchLayer does not sell personal information.

WatchLayer may share information with service providers that perform functions on its behalf or support the operation of the service, including cloud infrastructure, authentication, communications, security, payment processing, customer support, and other business operations.

WatchLayer may also disclose information when required by applicable law, legal process, or governmental request, or when reasonably necessary to protect the rights, security, property, or safety of WatchLayer, its customers, users, or others.

WatchLayer may disclose information in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, subject to applicable legal requirements.

WatchLayer uses Stripe to process subscription payments and support billing operations. Payment information submitted during checkout is processed through Stripe's services and is subject to Stripe's applicable privacy and security practices.

WatchLayer may receive and retain information necessary to identify a Stripe customer or subscription and determine payment and subscription status, but WatchLayer does not need to receive or store full payment-card numbers as part of its normal subscription workflow.

WatchLayer retains information for as long as reasonably necessary to provide and secure the service, maintain customer accounts and security history, satisfy legitimate business needs, resolve disputes, enforce agreements, and comply with applicable legal obligations.

Ending or canceling a subscription does not necessarily result in immediate deletion of the customer account or associated information.

Retention periods for customer accounts, cloud security data, findings, billing records, logs, and other categories of information may differ based on the purpose and nature of the information.

WatchLayer may use automated expiration or deletion mechanisms for certain categories of data. Additional retention and deletion practices may be described in applicable documentation or customer agreements.

You may contact WatchLayer to ask questions about personal information associated with you, request correction or deletion where appropriate, or raise another privacy-related concern.

Depending on where you live and applicable law, you may have additional rights regarding personal information. WatchLayer will evaluate and respond to valid privacy requests as required by applicable law.

WatchLayer may need to verify a requester's identity or authority before completing certain privacy requests.

WatchLayer relies on third-party services and infrastructure to provide portions of the website and service. Those providers may process information on WatchLayer's behalf or, where applicable, under their own terms and privacy policies.

Customer cloud environments hosted by AWS, Microsoft Azure, Google Cloud, or other providers remain subject to the applicable cloud provider's terms, policies, and practices.

WatchLayer is a business-focused cloud security service and is not directed to children.

WatchLayer may update this Privacy Policy as its services, data practices, business operations, legal obligations, or security capabilities change.

Updates will be reflected on this page with a revised effective date. Where required by applicable law, WatchLayer will provide additional notice of material changes.