Privacy notice
What is processed
Your business address, plus up to 2 private addresses that you enter yourself. Nothing else.
Who processes it
Lookups are performed by IntelBase, a service operated in the USA. Your address is transmitted there for the lookup.
How long
Results are stored for a maximum of 7 days and are then deleted automatically. No raw provider data is kept at any point — only a reduced summary (platform names, breach names, categories, profile details found, and passwords).
Who can see it
Only you. Your result is tied to your sign-in and is not shown to the trainer, to your colleagues, or to anyone else. The trainer sees anonymous totals only — how many addresses were checked, how many findings came back — with no address and no name attached. Those totals are kept after your data is deleted.
Passwords
Passwords found in leaks are shown masked. You can reveal one yourself with the show button; nothing is revealed until you ask for it. They are deleted together with the rest of your result.
Findings from credential collections
If your login details show up in leaked credential collections, the result says so, so that you can change the password. Nothing is reported to anyone automatically.