Privacy Policy

Effective Date: January 1, 2026

At LeakSeek ("we," "us," or "our"), we are committed to protecting the privacy and security of our users ("you," "your") and the integrity of the data we analyze. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you access our platform, including our website, dashboard, and API services (collectively, the "Services").

By using LeakSeek, you acknowledge that you have read and understood this policy. Sentinel Shield Solutions operates LeakSeek as an advanced cyber intelligence platform designed for legitimate security research and corporate defense.

1. Information We Collect

We collect information to provide secure and authorized access to our intelligence services:

• Account Information: Name, corporate email address, organizational affiliation, and encrypted credentials.
• Usage Data: API access logs, search queries, IP addresses, and session timestamps for security auditing and rate limiting.
• Payment Information: Processed securely via third-party compliant payment processors. We do not store full credit card details.

2. Processing of Threat Intelligence Data

LeakSeek aggregates compromised personal data (such as emails, passwords, and system logs) to provide our threat intelligence services. This data is sourced from:

• Publicly accessible internet sources.
• Dark web forums and illicit communities.
• Dark web marketplaces and ransomware leak sites.
• Third-party threat intelligence feeds.

This data is processed strictly for the purpose of threat intelligence, fraud prevention, and assisting organizations in securing their compromised assets. We strictly prohibit the use of our platform for illegal activities, including doxxing, identity theft, or unauthorized surveillance.

3. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), our lawful basis for processing breached personal data is Legitimate Interest (Article 6(1)(f)). As outlined in GDPR Recital 49, processing personal data to the extent strictly necessary and proportionate for the purposes of ensuring network and information security constitutes a legitimate interest.

4. Data Security

We employ enterprise-grade security measures to protect your account and our infrastructure, including:

• Encryption: TLS 1.3 for data in transit and AES-256 for sensitive data at rest.
• Access Control: Strict Role-Based Access Control (RBAC) and Multi-Factor Authentication (MFA).
• Audit Logs: Comprehensive logging of all system interactions to prevent abuse.

5. Data Retention

In accordance with the principle of data minimization, LeakSeek retains breached personal data only for as long as it is necessary to fulfill the cybersecurity purposes for which it was collected. Specifically:

• Active Threats: Data indicating an active compromise (e.g., exposed credentials, stealer logs) is retained while the threat remains viable to allow organizations to respond.
• Historical Logs: After the active threat window, data may be anonymized, hashed, or purged depending on legal obligations and technical necessity.
• Account Data: User account data is retained for the duration of the active subscription and securely deleted upon account termination, barring legal requirements.

6. International Data Transfers

LeakSeek operates infrastructure globally. If you are accessing our Services from the European Economic Area (EEA), the UK, or Switzerland, your data may be transferred to and processed in countries outside of these regions, including the United States.

To ensure compliance with GDPR Article 44, any transfer of personal data outside the EEA is protected by appropriate safeguards, primarily relying on Standard Contractual Clauses (SCCs) approved by the European Commission, and stringent supplementary security measures (such as encryption in transit and at rest).

7. Third-Party Sharing

We do not sell your personal account information. We may share data only/when:

• Required by law or validity service of legal process.
• Necessary to prevent imminent harm or financial loss.
• Engaging trusted service providers who adhere to strict confidentiality agreements.

8. Your Rights (GDPR & CCPA)

Under GDPR, CCPA, and applicable data protection laws, individuals have the following rights regarding their personal data, including data found within our threat intelligence index:

• Right to Access: You may request confirmation of whether we process your personal data and access to that data.
• Right to Erasure (Right to be Forgotten): You may request the deletion of your personal data from our searchable database.
• Right to Rectification: You may request correction of inaccurate personal data.
• Right to Restrict Processing & Object: You may object to our processing based on legitimate interest.
• Right to Opt-Out of Sale: (CCPA) We do not sell personal data, but you have the right to opt-out of any potential sharing of your data.

To exercise your Right to Erasure regarding leaked data, please visit our Data Removal Request page. For all other requests, please contact our Data Protection Officer.

9. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Data Protection Officer (DPO) / Legal Team
Sentinel Shield Solutions
Email: [email protected]