Privacy notice
Who we are
Stegnos provides security awareness training to organizations. For training records we act as a processor on behalf of each organization, which is the controller.
What we collect
Names, work email addresses, group membership, training progress, scores, certificates, sign-in events and messages people report as suspicious.
Visiting our website
The public website uses no advertising or analytics cookies. If you arrive through a link with campaign tags (source, medium and campaign name), your browser keeps these tags for up to 30 days. They reach us only if you send the trial or quote form, together with your answer to “How did you hear about us?”, which is optional. We use them to learn which of our posts and campaigns bring requests, and we do not share them with advertising platforms. We also count visits in daily totals: the page, the site that linked to us and the campaign tags. This uses no cookie, and we do not keep your IP address or anything else that could identify you.
Why we use it
To deliver and track training, send reminders, produce certificates and evidence, and keep the service secure. We do not sell data or use it for advertising.
Where it is stored
In the hosting region agreed with each organization. Each organization’s data is kept separate from every other organization’s.
How long we keep it
While the organization uses the service, then for the grace period after it leaves, after which it is deleted. Audit records are kept as the law requires. Details of where a request came from are kept with the request: for a trial, they are deleted with the organization’s data.
Your rights
You can ask your organization to access, correct or delete your data. We help organizations answer these requests.
Contact
Questions about privacy go to your organization’s administrator, or to us through the contact details on this website.