Privacy Policy

1. Introduction

CTIWatch ("we", "our", or "the Platform") is a Cyber Threat Intelligence platform operated by Lear Security. This Privacy Policy explains how we collect, use, and protect information when you use our services at ctiwatch.com.

By accessing or using CTIWatch, you agree to this Privacy Policy. If you do not agree, please do not use our services.

2. Information We Collect

2.1 Automatically Collected Data

• Usage Analytics: Pages visited, time spent, browser type, device information
• IP Address: Collected for security and rate limiting purposes
• Cookies: Session management and analytics (Google Analytics)

2.2 Threat Intelligence Data

Our platform aggregates and displays publicly available threat intelligence data from various sources. This includes:

• Indicators of Compromise (IOCs): IP addresses, domains, URLs, file hashes
• Vulnerability information (CVEs, CVSS scores)
• Ransomware victim information (publicly disclosed)
• Threat actor profiles and campaign data

Note: All threat intelligence data displayed is collected from public sources and does not contain personal information about individual users.

3. Cookies & Tracking

We use cookies and similar technologies for:

• Essential Cookies: Required for the platform to function properly
• Analytics Cookies: Google Analytics to understand how visitors use our site

You can control cookies through your browser settings. Disabling cookies may affect platform functionality.

4. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• HTTPS encryption for all communications
• Secure server infrastructure
• Regular security assessments
• Access controls and monitoring

5. Third-Party Services

We use the following third-party services:

• Google Analytics: For website analytics
• Google Tag Manager: For tag management

These services have their own privacy policies governing their use of data.

6. Your Rights

You have the right to:

• Access information we hold about you
• Request correction of inaccurate data
• Request deletion of your data (Art. 17 GDPR / Art. 18 LGPD)
• Export a copy of your personal data (Art. 20 GDPR / Art. 19 LGPD)
• Opt-out of analytics tracking
• Lodge a complaint with a supervisory authority

You can exercise your export and deletion rights directly in your account: Settings → Privacy & Data

For all other inquiries, contact privacy@ctiwatch.com.

7. Contact Us

For privacy-related inquiries or to exercise your rights, contact us at:

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of any material changes by posting the new policy on this page with an updated "Last updated" date.