Privacy Policy

1. Overview

ThreatFusionAI™ is operated by Craw Cyber Security Private Limited, New Delhi, India ("we", "us", "our"), and is an AI-powered threat intelligence and cyber defense platform. This Privacy Policy explains what information we collect from users of our website and API, how we use it, and the choices you have. By creating an account or using our services, you agree to the practices described here.

2. Information We Collect

• Account information — username, email address, password (stored hashed), and profile details you provide (full name, phone number, occupation, biography).
• Usage data — API requests, search queries, IOC lookups, and platform activity, including timestamps and endpoint metadata, used for rate limiting, abuse prevention, and service improvement.
• Technical data — IP address, browser type, and device information collected automatically for security and analytics purposes.
• Submitted threat data — indicators of compromise (hashes, IPs, domains, URLs, emails) you submit for analysis.

3. How We Use Your Information

• To provide, operate, and maintain the platform and API.
• To authenticate accounts and enforce API rate limits and subscription plans.
• To detect, prevent, and investigate abuse, fraud, or security incidents.
• To communicate service updates, security alerts, and account-related notices.
• To improve our threat detection models and platform features.

4. Cookies & Similar Technologies

Strictly necessary cookies. These are always set, because the site cannot work without them. They do not require your consent and cannot be switched off:

• sessionid — keeps you signed in. Cleared when you close your browser.
• csrftoken — protects forms against cross-site request forgery.
• Your cookie choice — stored in your browser so we do not ask again.
• Cloudflare may set a short-lived cookie to distinguish automated traffic from people. Our Cloudflare page analytics are cookieless.

Analytics cookies — only if you accept them. These do not load at all unless you choose “Accept all”. If you reject, no analytics script is downloaded and no analytics cookie is set:

• Google Analytics 4 — how many people visit, which pages they use, and how they arrived. Sets _ga and _ga_*, which last up to two years.
• Microsoft Clarity — heatmaps and session recordings, which capture how pages are scrolled and clicked. Sets _clck and _clsk on this site, and identifiers including CLID and MUID on Microsoft’s own domains. MUID is a Microsoft advertising identifier shared with Bing.

Both are loaded through Google Tag Manager. We do not run advertising or retargeting tags, and we do not sell the data either service collects.

Security. Every page loads Google reCAPTCHA, which sets a cookie on Google’s domain to tell people from bots. It is on every page rather than only the forms because the newsletter box sits in the footer sitewide. This protects the service against automated abuse rather than measuring anything, so it is not behind the consent choice.

Changing your mind. Select Cookie settings at the foot of any page to accept or reject at any time. Rejecting after previously accepting clears the analytics cookies we can reach from this site; identifiers held on Microsoft’s own domains are outside our control, and you can clear those through your browser.

5. How We Share Information

We do not sell your personal information. We may share data with:

• Service providers who help us operate the platform (e.g. email delivery, hosting), under confidentiality obligations.
• Payment processors when you buy a plan: Stripe (cards) and Razorpay (UPI, netbanking, wallets) collect your payment details directly and process them under their own privacy policies. We receive only what we need to run your plan and invoices: your name, billing email and address, the card brand and last four digits, and the payment’s status.
• Law enforcement or regulators when required by law or to protect the rights, property, or safety of ThreatFusionAI™, our users, or the public.
• Successors in the event of a merger, acquisition, or asset sale, with notice to affected users where required.

6. Data Retention

We retain account and usage data for as long as your account is active, or as needed to comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated personal data, subject to legal retention requirements.

7. Data Security

We apply industry-standard technical and organizational measures — including encryption in transit, access controls, and API key authentication — to protect your data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can update your profile directly from your account page, or contact us to exercise these rights.

9. International Data Transfers

Your information may be processed in countries other than your own. Where required, we take steps to ensure appropriate safeguards are in place for such transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the platform or by email. Continued use of the service after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or how we handle your data, write to Craw Cyber Security Private Limited at support@threatfusionai.com or reach out via our Contact page.