Privacy Policy

1. Overview

This Privacy Policy explains how Vetari ("Vetari," "we," "us") collects, uses, and protects information through the Trawl platform, including our marketing site and the Trawl application. It applies to visitors of trawl.vetari.org and to organizations and individuals who use Trawl.

2. Who this applies to

Trawl is used in two distinct ways, and this policy covers both:

• Customers — the organizations that purchase and administer Trawl to run phishing simulations and training for their own staff.
• Simulated targets — employees of a customer organization who receive simulated phishing campaigns or training as part of that organization's program.

3. Information we collect

From customers

• Account and billing details (name, work email, organization, payment information).
• Configuration data you enter into Trawl (target lists, campaign settings, branding).

From simulated targets

• Interaction data from simulations you run: whether a simulated email was opened, a link clicked, a credential entered, or the message reported.
• Training completion and assessment results.

Trawl never captures a target's real credentials or personal accounts — simulated landing pages are sandboxed and do not connect to live services.

4. How we use information

• To operate and improve the Trawl platform.
• To generate the risk scores, analytics, and compliance reports Trawl provides to customers.
• To communicate with customers about their account, billing, and product updates.
• To meet legal and regulatory obligations.

5. Data retention

Customer and simulation data is retained for as long as an account is active, plus a limited period afterward for backup and legal purposes. Customers can request deletion of their organization's data; contact us to initiate this.

6. Your rights

Depending on your jurisdiction, you may have rights to access, correct, export, or delete personal data Trawl holds about you. Simulated targets should generally direct these requests to their employer (the Trawl customer), who controls that data; customers can direct requests to us.

7. Cookies

The Trawl marketing site uses minimal, functional cookies. The Trawl application may use additional cookies for authentication and session management — details are available in-product.

8. Data location and transfers

Add a description here of where data is hosted and any cross-border transfer safeguards you rely on, once your infrastructure and hosting provider are finalized.

9. Contact

Questions about this policy can be sent to hello@vetari.org.