Privacy Policy

1. Information We Collect

When you register and use SLAM Security Training & Tools, we collect the following information:

• Account data: name, email address, username, and company affiliation
• Training data: module progress, quiz scores, attempt history, and certificates earned
• Usage data: login timestamps and activity logs for security purposes
• Contact form submissions: name, company, email, phone, and message content

We do not collect payment information, precise location data, or any sensitive personal data beyond what is listed above.

2. How We Use Your Information

• To provide and operate the training platform
• To generate completion certificates tied to your name
• To allow your company administrator to monitor training progress
• To send training reminders and platform notifications (when email is configured)
• To respond to contact form enquiries
• To maintain security logs and detect abuse

3. Data Sharing

We do not sell, rent, or trade your personal data. Your training progress and results are visible to your company administrator. We do not share data with third parties except as required by law.

4. Secure Secret Sharing

The secure secret sharing tool uses zero-knowledge encryption. Secrets are encrypted in your browser before transmission. We store only encrypted ciphertext — we cannot read the content of any shared secret. Decryption keys never reach our servers.

5. Data Retention

Account data is retained for as long as your account is active. Training records are kept to support certificate verification. Shared secrets self-destruct according to the expiry settings chosen at creation. You may request deletion of your account by contacting us.

6. Security

All data is transmitted over HTTPS. Passwords are stored as one-way hashes. We employ brute-force protection, session timeouts, and security headers. While we take reasonable precautions, no system is completely immune to security risks.

7. Your Rights

You may request access to, correction of, or deletion of your personal data by contacting us through the contact form. We will respond within a reasonable timeframe.