Privacy Policy

Last Updated: October 7, 2026

VantaBlade is committed to protecting your privacy. This policy outlines our data handling practices. Our guiding principle is to collect only the minimum data necessary to provide our services.

1. Business Workspaces

  • What We Collect: For business workspaces, we collect account details, company workspace information, admin-provided employee email addresses, exposure scan results, incident metadata, remediation status, and report records needed to operate the Command Center.
  • Admin-Provided Identifiers: Business users are responsible for ensuring they have appropriate authority to submit employee or workforce identifiers for exposure checks.
  • Workspace Use: Business workspace data is used to provide employee exposure workflows, scans, incident tracking, remediation workflows, reporting, support, and service operations.

2. FreeScan Service

  • What We Collect: We collect the email address you provide to perform the requested breach check and support the related product workflow.
  • Data Storage: FreeScan workflows may include persisted scan and funnel records. If you request a report, report records and generated report artifacts may also be stored so the report can be generated and delivered.
  • Optional Opt-In: If you choose to opt-in to our mailing list during a FreeScan, your email will be stored in our marketing system for the purpose of sending product and security updates. You can unsubscribe at any time.

3. DeepScan Service

  • Payments: DeepScan payments are processed by Gumroad. VantaBlade does not receive or store raw card details.
  • What We Collect: VantaBlade receives the purchase state needed to issue the product entitlement and collects the identifiers you choose to scan (email, usernames, phone numbers, IP addresses, or domains).
  • Data Storage: Purchase and intake records, analysis results, report references, and generated report artifacts may be persisted as needed to operate the product, deliver the report, and support the purchase workflow.

4. Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. We share information with essential service providers, including Gumroad for payment processing. We also use essential service providers for exposure-data retrieval, analysis, storage, and report delivery.

5. Your Rights

You have the right to request access to or deletion of the data we hold on you. To make a request, please contact us.

6. Contact Us

If you have any questions about this privacy policy, please contact us at support@vantablade.io.