Privacy Policy

1. Data Controller

Blue Bear Security Inc., headquartered in New York City, is the controller of your personal data under the General Data Protection Regulation (GDPR) and other applicable privacy laws.

For any privacy-related requests or questions, contact us directly at privacy@bluebear.io.

2. Information We Collect

We only collect the minimum amount of data required to serve you and understand our website performance:

• Waitlist Registration: We collect your email address when you sign up to receive updates about our platform.
• Contact Enquiries: We collect your name, email address, and the contents of your message when you contact us.
• Analytics & Cookies: If you consent via our cookie banner, we use PostHog to analyze site usage. This includes anonymized telemetry such as page views, clicks, browser type, and generalized location data.

3. Legal Basis for Processing

Our legal grounds for processing your data under GDPR Article 6 include:

• Consent (Article 6(1)(a)): When you opt-in to our waitlist, contact us, or accept analytics cookies. You can withdraw your consent at any time.
• Legitimate Interests (Article 6(1)(f)): To maintain, optimize, and protect our website against security threats.

4. Data Retention & Security

We retain waitlist and enquiry data only for as long as necessary to fulfill your request or maintain communication. We use secure cloud providers (including Resend for mail notifications) and implement branch protection, access controls, and code auditing on our codebase to prevent unauthorized access or leaks.

5. Your Rights

Depending on your region (such as the EEA, UK, or California), you hold rights over your personal data:

• The right to access and receive a copy of your data.
• The right to request rectification of inaccurate details.
• The right to erasure ("right to be forgotten").
• The right to restrict or object to processing.

To exercise these rights, email privacy@bluebear.io. We respond to all requests within 30 days.