How we handle personal data.

• Contact information — name, organisation, email address and any details you provide when requesting a demo or contacting us.
• Usage data — pages visited, device type, browser, approximate location and referring site, collected through standard analytics and server logs.
• Cookies and similar technologies — see our Cookie policy for details.

• To respond to demo requests and other enquiries.
• To provide, maintain and improve the website and our services.
• To understand how visitors use the site and fix problems.
• To comply with legal obligations and protect our rights.

You can ask us to access, correct, delete or restrict the processing of your personal data, and to object to certain processing. To make a request, contact us at osint@infrascan.net. We will respond within a reasonable time and may need to verify your identity.

We may update this policy from time to time. The latest version will always be available on this page, together with the effective date.

• Consent (Art. 6(1)(a)) — analytics and functionality cookies, and marketing emails where you opted in. You may withdraw consent at any time.
• Contract (Art. 6(1)(b)) — creating and operating your console account, running searches you request and issuing reports.
• Legitimate interests (Art. 6(1)(f)) — site security, fraud and abuse prevention, and answering business enquiries you send us.
• Legal obligation (Art. 6(1)(c)) — accounting, tax and record-keeping duties under Estonian and EU law.

• Enquiry and demo-request details — 24 months from the last contact, then deleted.
• Account and case data — for the life of the account and 12 months after closure, unless a longer period is legally required.
• Server and security logs — up to 12 months.
• Accounting records — 7 years, as required by Estonian law.
• Cookie consent record — 12 months, after which we ask again.

• Our infrastructure and data processing are located in the European Union by default.
• Where a provider processes data outside the EEA, we rely on European Commission adequacy decisions or Standard Contractual Clauses with supplementary safeguards.
• In on-premises and private-cloud deployments, investigative data stays inside your own jurisdiction and is not sent to external AI providers.

• Access a copy of your personal data and information on how it is processed.
• Rectify inaccurate data and complete incomplete data.
• Erasure of your data where the conditions in Art. 17 are met.
• Restriction of processing and objection to processing based on legitimate interests.
• Data portability in a structured, machine-readable format.
• Withdraw consent at any time, without affecting processing already carried out.
• Not be subject to decisions based solely on automated processing; our risk profiles are reviewed by analysts and never decide about you automatically.

We answer data subject requests within one month. Requests: osint@infrascan.net. If you are unsatisfied, you may lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, Tatari 39, 10134 Tallinn, info@aki.ee) or with the supervisory authority of your EU country of residence.

You can withdraw or change your consent at any time using the Cookie settings link in the footer.