At Gottaphish, we take data protection and privacy seriously. We are committed to complying with the General Data Protection Regulation (GDPR) to ensure the security and confidentiality of the personal data we collect from visitors to our site. In this statement, we describe our data collection practices and how we process personal information.
We are a French company and we do our best to process and store data in France or in Europe.
Types of data we collect:
During a phishing campaign, for the sole purpose of giving you access to this information, we may collect different types of data, including:
Personal data : We may collect personal data such as your first name, last name, email address, telephone number and company position (optional). This information is only collected if you provide it voluntarily by uploading the csv/sso.
Technical data : Our website automatically collects certain technical information, such as your IP address, user agent, and referring URL. This information helps you have a better vision of your information system.
All this data is entirely managed by you, and is deleted when your account is deleted
How we use your data when you contact us :
The personal data we collect is used only for the purposes for which it was provided, including :
Customer communication : We may use your contact information, such as your email address or telephone number, to respond to your inquiries, provide requested information, or communicate updates regarding our services.
Internal record keeping : We may store your personal data for internal administrative purposes, such as keeping a record of our interactions with you.
Analytics and improvements : We may analyze non-personally identifiable data, such as website usage patterns, to improve the performance, content, and user experience of our website.
Data protection and sharing :
We implement appropriate technical and organizational measures to ensure the security and confidentiality of your personal data. We do not sell, rent, or lease your personal information to third parties.
Your data, your choices :
Under the GDPR, you have certain rights regarding your personal data, including the right of access, rectification, erasure, restriction of processing, opposition to processing and data portability. You can exercise these rights by contacting us using the information provided below.
Data retention :
We retain your personal data only for as long as necessary to fulfill the purposes described in this statement, or as required by applicable laws and regulations.
Our subcontractors are French (Adjustable if necessary) :
French subcontractors ;
OnetSolution, OVH, and MilkyWan :
US subcontractors (Possible alternatives)
Sendgrid, ChatGPT, Cloudflare
If you have any questions, concerns or requests regarding our data practices or this GDPR statement, please contact us.
