Privacy Policy

This website, avthreatlabs.com, is operated by AV Threat Labs. We build cloud security software, and Casefile is our first product. For anything about your data, or to exercise the rights below, email contact@avthreatlabs.com. A PGP key is available on request.

This policy is about the website: the pages you read, the waitlist, and the emails you send us. Casefile itself runs on your own machine, so the data inside an assessment is handled differently. That is described under “Casefile and your assessment data” below.

Waitlist. If you join the waitlist, we collect your email address and, if you provide it, your company name. This is handled by Clerk, our waitlist and identity provider.

Email. If you email us, we keep your message and your address for as long as we need to help you.

Analytics. We use Google Analytics to understand how the site is used. It records things like the pages you visit, the site that referred you, your device and browser, and an approximate location derived from your IP address. It sets cookies to do this.

Server logs. Our host, Cloudflare, processes IP addresses and basic request information to deliver the site and protect it from abuse.

We use this data to run the waitlist and tell you when early access opens, to reply to you, to understand and improve the site, and to keep it secure. We do not sell your data, and we do not use it for advertising.

Where the law requires a basis, for example under the GDPR, we rely on your consent for the waitlist and analytics, and on our legitimate interest in operating, improving, and securing the site and in responding to you.

We share data only with the providers that help us run the site:

• Clerk, for the waitlist and identity.
• Google Analytics, for usage measurement.
• Cloudflare, for hosting, delivery, and security.

Each processes data on our behalf under its own terms. We do not sell or rent your data to anyone.

The site uses analytics cookies from Google Analytics. You can block or delete cookies in your browser settings, and the site still works without them.

We keep waitlist details until Casefile launches or until you ask us to remove you, whichever comes first. We keep emails for as long as they are useful to the conversation. Analytics and server logs follow the retention defaults of the providers named above.

Depending on where you live, you may have the right to access, correct, delete, or export your data, to object to or restrict its use, and to withdraw consent at any time. Email contact@avthreatlabs.com and we will action it. If you are in the EU or UK, you can also complain to your local data protection authority.

Casefile runs assessments on your machine. Cloud credentials stay in your operating system's secret store, and the findings, evidence, and reports in a case stay local to you. We do not receive your assessment data through this website. If you enable Pro sync in a future release, that will be covered by its own terms and consent at the time.

The site is served from Cloudflare's global network, and our providers may process data in countries other than your own, including the United States. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.

If we change how we handle data, we will update this page and the date at the top. Material changes to the waitlist will be communicated by email where appropriate.

Questions about privacy? Email contact@avthreatlabs.com. A PGP key is available on request.