Privacy Policy

Effective Date: July 7, 2025

1. Introduction

Trusted Zone ("we," "our," or "us") is committed to protecting the privacy of our users and customers. This Privacy Policy explains how we collect, use, and safeguard data when you use our honeypot monitoring software and website ("Service").

2. Data We Collect

When you install or use Trusted Zone, the following types of data may be collected automatically:

• IP addresses and connection metadata of visitors to your honeypot
• Timestamps of incoming connections
• Protocol headers and partial request data (for threat profiling)
• Device or environment metadata (e.g., user-agent strings)

We do not collect personal information from you unless you explicitly provide it (e.g., by contacting us).

3. Data Usage

We use collected data for the following purposes:

• Security analytics and threat detection
• Product improvement and anomaly research
• Optional alerting features (if enabled)

4. Data Retention and Storage

By default, all data is stored locally on your system. If you opt-in to any remote alerting or backup features, logs may be transmitted securely to our servers. In such cases:

• Data is encrypted in transit and at rest
• We retain data for a maximum of 30 days unless required by law

5. Legal Basis and GDPR Compliance

Trusted Zone operates under the legal basis of legitimate interest as defined in Article 6(1)(f) of the General Data Protection Regulation (GDPR). Our collection and processing of honeypot-related logs—including IP addresses, connection metadata, and behavioral signatures—are strictly for the purpose of improving security, detecting malicious activity, and supporting our users in threat analysis.

We emphasize that:

• The data is processed under legitimate interest
• The data is never stored beyond the minimum time required for immediate analysis
• In most cases, the data is processed in-memory or temporarily, and results (not raw logs) are returned to the user
• No profiling, behavioral tracking, or marketing is performed based on IP logs

When Trusted Zone performs remote analysis or uses AI-assisted diagnostics, logs may be forwarded to subprocessors for automated threat classification. This only occurs when the user explicitly submits logs for that purpose, and subprocessors are either GDPR-compliant or receive only non-identifying metadata where possible.

Our privacy commitments include:

• Opt-out support: Any user or contact recipient can request deletion or exclusion at any time
• No resale or third-party sharing: Data is not shared beyond the analysis pipeline unless legally required

We do not send marketing emails to private individuals in the EU unless there is a clearly documented legal basis (e.g., prior consent, B2B exemption, or the email was made publicly available for professional contact).

6. Your Responsibilities as a Customer

If you deploy Trusted Zone on your network, you are the data controller for attacker-related logs. You must ensure your use complies with local regulations regarding data capture, network monitoring, and disclosure.

7. Data Sharing and Disclosure

We do not sell or share data with third parties. We may disclose limited data only:

• If required by court order or subpoena
• To prevent imminent harm or comply with law enforcement requests

8. Your Rights

You may contact us to:

• Request deletion of data (if hosted)
• Request a copy of stored logs
• Ask questions about data handling

9. Updates

We may update this Privacy Policy as needed. You are advised to check this page periodically for changes.

10. Contact

Email: trustedzonehoneypot@gmail.com