{"platform":"Gecko Security","slug":"gecko-security","category":"Workflow & Automation","website":"https://www.gecko.security","risk_rating":"medium","verification":"fully_verified","verification_detail":{"tier":"fully_verified","partial_reason_code":"none","partial_reason_label":"Complete","blocked_core_documents":[]},"rating":{"value":"medium","unknown_reason_code":"none","unknown_reason_label":"Rated"},"corpus_status":"corpus_complete","canonical":"https://airinetwork.com/platform/gecko-security","machine_url":"https://airinetwork.com/api/machine/platform/gecko-security","last_reviewed":"2026-08-18","findings_count":19,"findings":[{"id":"privacy-data-use-744c625a15b54abd1ae8","permalink":"https://airinetwork.com/platform/gecko-security/finding/privacy-data-use-744c625a15b54abd1ae8","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" At Gecko Security, Inc. (“we,” “our,” or “us”), safeguarding the privacy of our users and visitors (“you”) is one of our core priorities. This Privacy Policy outlines the types of information we collect, how we use and share it, and how we protect it when you interact with our website and services.\n If you have questions about this Privacy Policy or our privacy practices, please contact us at gecko@gecko.security .","caution":null,"provenance":{"source_url":"https://www.gecko.security/privacy-policy","snapshot_sha256":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11","wayback_url":null,"deep_link":"https://www.gecko.security/privacy-policy#:~:text=%20At%20Gecko%20Security%2C,us%20at%20gecko%40gecko.security%20.","structural_citation":"Privacy Policy › “Privacy Policy”","citation_basis":"heading_path","char_start":107,"char_end":526,"retrieved_at":"2026-07-20T00:27:07.894452+00:00"}},{"id":"privacy-data-use-1074ac681ddc39d63289","permalink":"https://airinetwork.com/platform/gecko-security/finding/privacy-data-use-1074ac681ddc39d63289","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" By using our website, applications, platforms and any of our associated online services (collectively, “Services”), you consent to this Privacy Policy and agree to its terms. If you do not agree with any part of this Privacy Policy, you should discontinue your use of our Services immediately.","caution":null,"provenance":{"source_url":"https://www.gecko.security/privacy-policy","snapshot_sha256":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11","wayback_url":null,"deep_link":"https://www.gecko.security/privacy-policy#:~:text=%20By%20using%20our,of%20our%20Services%20immediately.","structural_citation":"§ 1 (Consent)","citation_basis":"section_number","char_start":547,"char_end":841,"retrieved_at":"2026-07-20T00:27:07.894452+00:00"}},{"id":"privacy-data-use-1329f77c4109d522945e","permalink":"https://airinetwork.com/platform/gecko-security/finding/privacy-data-use-1329f77c4109d522945e","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" As part of providing and improving our Services and for other purposes as noted in this Privacy Policy, we collect both data that identifies you, directly or indirectly (“Personal Data”) and data that does not identify you and which cannot reasonably be used to identify you (“Non-Personal Data”). Specifically, we collect Personal Data and Non-Personal Data as follows:\n Personal Data: The Personal Data we collect may include, without limitation, your name, email address, phone number, company name, online identifiers (such as IP address) and any other information you provide directly when contacting us or engaging with our Services.\n Non-Personal Data: We automatically collect certain Non-Personal Data when you interact with our website, such as browser type, referring/exit pages, and the date and time of your visit. This information is gathered through cookies and similar tracking technologies.\n If you contact us directly, we may collect additional information, including any attachments or details you provide.","caution":null,"provenance":{"source_url":"https://www.gecko.security/privacy-policy","snapshot_sha256":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11","wayback_url":null,"deep_link":"https://www.gecko.security/privacy-policy#:~:text=%20As%20part%20of,or%20details%20you%20provide.","structural_citation":"§ 2 (Information We Collect)","citation_basis":"section_number","char_start":877,"char_end":1903,"retrieved_at":"2026-07-20T00:27:07.894452+00:00"}},{"id":"privacy-data-use-a06265be8439618e44f2","permalink":"https://airinetwork.com/platform/gecko-security/finding/privacy-data-use-a06265be8439618e44f2","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" We use the information we collect in the following ways:\n To operate and maintain our Services, such as maintaining your account with us and providing you technical assistance with respect to your use of the Services.\n To improve our Services.\n To personalize your experience and tailor content to your preferences.\n To respond to you when you contact us directly with an inquiry or other communication.\n To understand and analyze website usage and user behavior.\n To develop new products, services, and features.\n To send you newsletters and updates about us and our Services where you have chosen to receive such materials.\n To prevent fraud and maintain the security of our Services.\n To monitor compliance with this Privacy Policy and our Terms of Service and enforce them.\n To exercise or defend our legal rights and to comply with subpoenas, court orders or other legal process.\n To comply with laws and regulations that apply to us.","caution":null,"provenance":{"source_url":"https://www.gecko.security/privacy-policy","snapshot_sha256":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11","wayback_url":null,"deep_link":"https://www.gecko.security/privacy-policy#:~:text=%20We%20use%20the,that%20apply%20to%20us.","structural_citation":"§ 3 (How We Use Your Information)","citation_basis":"section_number","char_start":1944,"char_end":2884,"retrieved_at":"2026-07-20T00:27:07.894452+00:00"}},{"id":"privacy-data-use-58b2327da9f2bb39539b","permalink":"https://airinetwork.com/platform/gecko-security/finding/privacy-data-use-58b2327da9f2bb39539b","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Like most website operators, we use cookies, web beacons and similar technologies to store information about visitors’ preferences and track the pages they visit on our website. Cookies help us optimise user experience by customising web content based on browser type or other information.\n You can choose to disable cookies through your browser settings. However, please note that disabling cookies may affect your ability to fully interact with our website and use our Services.","caution":null,"provenance":{"source_url":"https://www.gecko.security/privacy-policy","snapshot_sha256":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11","wayback_url":null,"deep_link":"https://www.gecko.security/privacy-policy#:~:text=%20Like%20most%20website,and%20use%20our%20Services.","structural_citation":"§ 7 (Cookies and Web Beacons)","citation_basis":"section_number","char_start":9023,"char_end":9504,"retrieved_at":"2026-07-20T00:27:07.894452+00:00"}},{"id":"privacy-data-use-8b2ac1cc60be50e1c143","permalink":"https://airinetwork.com/platform/gecko-security/finding/privacy-data-use-8b2ac1cc60be50e1c143","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" In addition to other requests described in this Privacy Policy which you may make regarding your Personal Data (as applicable), you may be entitled to exercise control over or make certain choices relating to your Personal Data depending on applicable laws and regulations and the functionalities we offer. For example, you may access, correct or delete your Personal Data via your account dashboard or by contacting us at gecko@gecko.security . You may also opt out of marketing emails we send to you by using the unsubscribe link in such emails. If you contact us to make any requests in relation to your Personal Data, we will respond to you as required by applicable law.","caution":null,"provenance":{"source_url":"https://www.gecko.security/privacy-policy","snapshot_sha256":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11","wayback_url":null,"deep_link":"https://www.gecko.security/privacy-policy#:~:text=%20In%20addition%20to,required%20by%20applicable%20law.","structural_citation":"§ 9 (User Controls & Preferences Regarding Personal Data)","citation_basis":"section_number","char_start":9904,"char_end":10580,"retrieved_at":"2026-07-20T00:27:07.894452+00:00"}},{"id":"privacy-data-use-6bf08852d29c02fe06c0","permalink":"https://airinetwork.com/platform/gecko-security/finding/privacy-data-use-6bf08852d29c02fe06c0","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" We follow standard industry procedures in using log files. These files record visitors’ interactions with our website, capturing details such as your browser type, ISP, date and time of access, referring/exit pages, and click counts. This information is Non-Personal Data. We use this data to analyze trends, administer the website, track user movements, and gather general demographic data.","caution":null,"provenance":{"source_url":"https://www.gecko.security/privacy-policy","snapshot_sha256":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11","wayback_url":null,"deep_link":"https://www.gecko.security/privacy-policy#:~:text=%20We%20follow%20standard,gather%20general%20demographic%20data.","structural_citation":"§ 10 (Log Files)","citation_basis":"section_number","char_start":10604,"char_end":10996,"retrieved_at":"2026-07-20T00:27:07.894452+00:00"}},{"id":"privacy-data-use-b36f7e378157d9d9f7e8","permalink":"https://airinetwork.com/platform/gecko-security/finding/privacy-data-use-b36f7e378157d9d9f7e8","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" We do not knowingly collect Personal Data from children under the age of 13. If you believe that a child under 13 has provided us with Personal Data, please contact us immediately, and we will promptly take steps to remove such Personal Data from our records.","caution":null,"provenance":{"source_url":"https://www.gecko.security/privacy-policy","snapshot_sha256":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11","wayback_url":null,"deep_link":"https://www.gecko.security/privacy-policy#:~:text=%20We%20do%20not,Data%20from%20our%20records.","structural_citation":"§ 12 (Children’s Information)","citation_basis":"section_number","char_start":11545,"char_end":11805,"retrieved_at":"2026-07-20T00:27:07.894452+00:00"}},{"id":"privacy-data-use-1b15d25904bc417a8470","permalink":"https://airinetwork.com/platform/gecko-security/finding/privacy-data-use-1b15d25904bc417a8470","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" We take the protection of your Personal Data seriously and employ industry-standard security measures, including encryption, regular penetration tests, and vulnerability assessments to protect Personal Data. While we strive to safeguard all Personal Data, no system can be 100% secure and we cannot guarantee that unauthorized access to Personal Data will never occur.","caution":null,"provenance":{"source_url":"https://www.gecko.security/privacy-policy","snapshot_sha256":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11","wayback_url":null,"deep_link":"https://www.gecko.security/privacy-policy#:~:text=%20We%20take%20the,Data%20will%20never%20occur.","structural_citation":"§ 13 (Security Practices)","citation_basis":"section_number","char_start":11838,"char_end":12207,"retrieved_at":"2026-07-20T00:27:07.894452+00:00"}},{"id":"privacy-data-use-3e05c789140bc8ecb331","permalink":"https://airinetwork.com/platform/gecko-security/finding/privacy-data-use-3e05c789140bc8ecb331","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" We may update this Privacy Policy from time to time. Any changes will be posted on this page, and significant changes will be communicated to you through email or by a prominent notice on our website. Your continued use of our Services after such updates signifies your acceptance of the updated Privacy Policy.","caution":null,"provenance":{"source_url":"https://www.gecko.security/privacy-policy","snapshot_sha256":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11","wayback_url":null,"deep_link":"https://www.gecko.security/privacy-policy#:~:text=%20We%20may%20update,the%20updated%20Privacy%20Policy.","structural_citation":"§ 14 (Updates to This Privacy Policy)","citation_basis":"section_number","char_start":12252,"char_end":12564,"retrieved_at":"2026-07-20T00:27:07.894452+00:00"}},{"id":"privacy-data-use-2494909bfac111557b03","permalink":"https://airinetwork.com/platform/gecko-security/finding/privacy-data-use-2494909bfac111557b03","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" For questions about this Privacy Policy or to exercise your rights, please contact us at:\n Email: gecko@gecko.security \n Mailing Address: \n Gecko Security, Inc.","caution":null,"provenance":{"source_url":"https://www.gecko.security/privacy-policy","snapshot_sha256":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11","wayback_url":null,"deep_link":"https://www.gecko.security/privacy-policy#:~:text=%20For%20questions%20about,Address%3A%20Gecko%20Security%2C%20Inc.","structural_citation":"Privacy Policy › “Contact Information”","citation_basis":"heading_path","char_start":12594,"char_end":12755,"retrieved_at":"2026-07-20T00:27:07.894452+00:00"}},{"id":"data-retention-e676f5ca51c8910399bd","permalink":"https://airinetwork.com/platform/gecko-security/finding/data-retention-e676f5ca51c8910399bd","surface":"data_retention","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" We retain Personal Data only for as long as necessary to fulfil the purposes described in this Privacy Policy. We retain the categories of data described below as follows:\n Account and profile data: retained for the duration of our customer relationship plus up to 2 years thereafter;\n Transactional and billing records: retained for at least 7 years to satisfy tax or audit requirements;\n Support correspondence and logs: retained for up to 3 years to ensure quality and traceability;\n Analytical/usage data: Non-Personal Data regarding usage of our Services may be retained indefinitely.\n Upon expiration of the relevant retention period for Personal Data or upon your valid request for erasure of your Personal Data, we will securely delete or anonymise your Personal Data unless we are obligated under applicable law to retain it.","caution":null,"provenance":{"source_url":"https://www.gecko.security/privacy-policy","snapshot_sha256":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11","wayback_url":null,"deep_link":"https://www.gecko.security/privacy-policy#:~:text=%20We%20retain%20Personal,law%20to%20retain%20it.","structural_citation":"§ 4 (Data Retention)","citation_basis":"section_number","char_start":2914,"char_end":3749,"retrieved_at":"2026-07-20T00:27:07.894452+00:00"}},{"id":"indemnity-liability-74978f4a58c673ef696d","permalink":"https://airinetwork.com/platform/gecko-security/finding/indemnity-liability-74978f4a58c673ef696d","surface":"indemnity_liability","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Our Services may include links to third party websites. Please note that such links are provided for convenience only and we do not endorse or recommend such third party websites and are not responsible for the privacy practices of third party website operators. When you access a third party’s website, you may be bound by the privacy policies and practices of that third party and we encourage you to read the privacy policies on any third party websites you visit.","caution":null,"provenance":{"source_url":"https://www.gecko.security/privacy-policy","snapshot_sha256":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11","wayback_url":null,"deep_link":"https://www.gecko.security/privacy-policy#:~:text=%20Our%20Services%20may,party%20websites%20you%20visit.","structural_citation":"§ 11 (Links to Third Party Websites)","citation_basis":"section_number","char_start":11040,"char_end":11508,"retrieved_at":"2026-07-20T00:27:07.894452+00:00"}},{"id":"subprocessors-data-sharing-6a956cbfa4d17f419fa7","permalink":"https://airinetwork.com/platform/gecko-security/finding/subprocessors-data-sharing-6a956cbfa4d17f419fa7","surface":"subprocessors_data_sharing","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" We may share your information with:\n Service providers (e.g. hosting, analytics, payment processors) acting on our behalf;\n Professional advisers (e.g. legal, accounting firms) under confidentiality obligations;\n Persons or entities with whom you request that we share your information.\n Courts, law enforcement, regulators, government agencies or other parties where it is reasonably necessary for the establishment, exercise or defense of a claim, protecting our rights or the rights of our users, or is required by laws or regulations to which we are subject.\n In some instances, we process Personal Data on behalf of our customers and delegate certain functions to service providers that process Personal Data on our behalf (“subprocessors”). A current list of our subprocessors and their roles is available on our website. We conduct due diligence and impose contractual data protection requirements on all of our subprocessors.","caution":null,"provenance":{"source_url":"https://www.gecko.security/privacy-policy","snapshot_sha256":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11","wayback_url":null,"deep_link":"https://www.gecko.security/privacy-policy#:~:text=%20We%20may%20share,all%20of%20our%20subprocessors.","structural_citation":"§ 5 (Third-Party Sharing & Subprocessors)","citation_basis":"section_number","char_start":3798,"char_end":4732,"retrieved_at":"2026-07-20T00:27:07.894452+00:00"}},{"id":"audit-rights-dpa-residency-234a52aff678db8215a6","permalink":"https://airinetwork.com/platform/gecko-security/finding/audit-rights-dpa-residency-234a52aff678db8215a6","surface":"audit_rights_dpa_residency","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" This section of our Privacy Policy applies if you use our Services in the European Union (EU) or United Kingdom (UK) and we act as a “controller” (as explained below).\n With respect to certain operational functions which are part of our Services, we act as a controller (i.e., we determine the purposes and means of processing your Personal Data). Such functions include but are not limited to administering and maintaining your account with us and responding to inquiries that you send to us.\n You are not obligated to provide us with your Personal Data, however, if you choose not to provide your Personal Data to us, you may not be able to use some or all of our Services.\n Your Personal Data is processed for the purposes described in the section of this Privacy Policy titled “How We Use Your Information” and is shared with recipients listed under the section titled “Third-Party Recipients & Subprocessors.”\n Where we process your Personal Data or your Personal Data is processed on our behalf, we rely on one or more of the following lawful bases:\n Contractual necessity: to perform our obligations under any agreement with you;\n Legal obligation: to comply with applicable laws and regulations;\n Legitimate interests: for our business operations (e.g. security, fraud prevention, service improvements), provided your rights do not override those interests;\n Consent: where you have explicitly agreed to certain processing (e.g. processing to communicate with you).\n","caution":null,"provenance":{"source_url":"https://www.gecko.security/privacy-policy","snapshot_sha256":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11","wayback_url":null,"deep_link":"https://www.gecko.security/privacy-policy#:~:text=%20This%20section%20of,communicate%20with%20you).%20","structural_citation":"§ 6 (EU/UK Data Protection)","citation_basis":"section_number","char_start":4767,"char_end":6242,"retrieved_at":"2026-07-20T00:27:07.894452+00:00"}},{"id":"audit-rights-dpa-residency-99815c15688bdd6a7e95","permalink":"https://airinetwork.com/platform/gecko-security/finding/audit-rights-dpa-residency-99815c15688bdd6a7e95","surface":"audit_rights_dpa_residency","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Legal claims: where processing is necessary for the establishment, exercise or defense of legal claims.\n To the extent the processing of your Personal Data is based on your consent, you may withdraw your consent at any time. To withdraw your consent for the processing of your Personal Data, you may email us at gecko@gecko.security .\n As a data subject, you have the following rights:\n Right to Access: You can request access to or copies of your Personal Data.\n Right to Rectification: You can request corrections of inaccurate or incomplete Personal Data we maintain about you.\n Right to Erasure: You can request that we delete your Personal Data under certain conditions.\n Right to Restrict Processing: You can request that we limit the processing of your Personal Data.\n Right to Object: You can object to the processing of your Personal Data under certain conditions.\n Right to Data Portability: You can request that we transfer your Personal Data to another organisation or directly to you under certain conditions.\n Please note that the rights set forth above may be subject to certain limitations under applicable laws. We will notify you if we are not able to honor your request, in whole or in part, and we will otherwise respond to your request as required by applicable laws. If you wish to exercise any of the rights listed above, please contact us at gecko@gecko.security .\n Your Personal Data may be transferred or received by us outside the European Economic Area (EEA) or the UK. ","caution":null,"provenance":{"source_url":"https://www.gecko.security/privacy-policy","snapshot_sha256":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11","wayback_url":null,"deep_link":"https://www.gecko.security/privacy-policy#:~:text=%20Legal%20claims%3A%20where,or%20the%20UK.%20","structural_citation":"§ 6 (EU/UK Data Protection)","citation_basis":"section_number","char_start":6242,"char_end":7741,"retrieved_at":"2026-07-20T00:27:07.894452+00:00"}},{"id":"audit-rights-dpa-residency-03e28ed4a4d801c3993a","permalink":"https://airinetwork.com/platform/gecko-security/finding/audit-rights-dpa-residency-03e28ed4a4d801c3993a","surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":"In such cases, we ensure the transfer of your Personal Data occurs pursuant to a lawful transfer mechanism under applicable law, which may include without limitation:\n Standard Contractual Clauses;","caution":null,"provenance":{"source_url":"https://www.gecko.security/privacy-policy","snapshot_sha256":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11","wayback_url":null,"deep_link":"https://www.gecko.security/privacy-policy#:~:text=In%20such%20cases%2C%20we,limitation%3A%20Standard%20Contractual%20Clauses%3B","structural_citation":"§ 6 (EU/UK Data Protection)","citation_basis":"section_number","char_start":7741,"char_end":7938,"retrieved_at":"2026-07-20T00:27:07.894452+00:00"}},{"id":"audit-rights-dpa-residency-8547f52d6f4542241157","permalink":"https://airinetwork.com/platform/gecko-security/finding/audit-rights-dpa-residency-8547f52d6f4542241157","surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Other lawful transfer mechanisms under applicable data-protection laws.\n In cases where we transfer or receive your Personal Data in accordance with Standard Contractual Clauses, you may request a copy of such clauses or be informed of where they are accessible. To make such a request, please contact us at gecko@gecko.security .\n For details on how long we store your Personal Data, please refer to the “Data Retention” section above.\n If you have a concern regarding the processing of your Personal Data, you may contact us at gecko@gecko.security or you may lodge a complaint with the applicable data protection authority in the country in which you are located. For a listing of EU data protection authorities and their contact details, please visit https://www.edpb.europa.eu/about-edpb/about-edpb/members_en . If you are located in the UK, you may contact the Information Commissioner’s Office (ICO) via the following link: https://ico.org.uk/make-a-complaint/data-protection-complaints/ .","caution":null,"provenance":{"source_url":"https://www.gecko.security/privacy-policy","snapshot_sha256":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11","wayback_url":null,"deep_link":"https://www.gecko.security/privacy-policy#:~:text=%20Other%20lawful%20transfer,following%20link%3A%20https%3A%2F%2Fico.org.uk%2Fmake-a-complaint%2Fdata-protection-complaints%2F%20.","structural_citation":"Privacy Policy › “Adequacy decisions for the recipient country; or”","citation_basis":"heading_path","char_start":7989,"char_end":8986,"retrieved_at":"2026-07-20T00:27:07.894452+00:00"}},{"id":"audit-rights-dpa-residency-793d86b6169ac2260d61","permalink":"https://airinetwork.com/platform/gecko-security/finding/audit-rights-dpa-residency-793d86b6169ac2260d61","surface":"audit_rights_dpa_residency","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" We maintain independent attestation of our control environment, including SOC 2 compliance. In addition to encryption, penetration testing and regular vulnerability assessments, we undergo annual third-party audits to verify the effectiveness of our technical and organizational measures.","caution":null,"provenance":{"source_url":"https://www.gecko.security/privacy-policy","snapshot_sha256":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11","wayback_url":null,"deep_link":"https://www.gecko.security/privacy-policy#:~:text=%20We%20maintain%20independent,technical%20and%20organizational%20measures.","structural_citation":"§ 8 (Security Certifications & Audits)","citation_basis":"section_number","char_start":9550,"char_end":9839,"retrieved_at":"2026-07-20T00:27:07.894452+00:00"}}],"documents":[{"doc_type":"terms","pdf_page_count":null,"extraction_method":"static","page_level_citations":false,"last_captured":"2026-08-18","last_verified_scan":"2026-08-18","verified_scan_count":1},{"doc_type":"privacy","pdf_page_count":null,"extraction_method":"static","page_level_citations":false,"last_captured":"2026-07-20","last_verified_scan":"2026-07-20","verified_scan_count":1}],"clause_intelligence":{"clauses_count":151,"risk_patterns_count":16,"stance_events_count":16,"patterns_by_family":{"data_retention":1,"dispute_resolution":2,"ip_license":5,"legal_burden":4,"privacy_sharing":2,"tier_conditionality":1,"training_use":1},"risk_summary":{"medium":12,"high":4},"evidence":[{"pattern_key":"indefinite_or_necessity_retention","pattern_family":"data_retention","risk_rating":"medium","confidence":"high","stance_key":"retention","stance_value":"indefinite_or_necessity_based","evidence":"We retain Personal Data only for as long as necessary to fulfil the purposes described in this Privacy Policy. We retain the categories of data described below as follows: Account and profile data: retained for the duration of our customer relationship plus up to 2 years thereafter; Transactional and billing records: retained for at least 7 years to satisfy tax or audit requirements; Support correspondence and log...","reason":"The clause allows indefinite, perpetual, or necessity-based retention.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"data_retention","quote":"We retain Personal Data only for as long as necessary to fulfil the purposes described in this Privacy Policy. We retain the categories of data described below as follows: Account and profile data: retained for the duration of our customer relationship plus up to 2 years thereafter; Transactional and billing records: retained for at least 7 years to satisfy tax or audit requirements; Support correspondence and logs: retained for up to 3 years to ensure quality and traceability; Analytical/usage data: Non-Personal Data regarding usage of our Services may be retained indefinitely. Upon expiration of the relevant retention period for Personal Data or upon your valid request for erasure of your Personal Data, we will securely delete or anonymise your Personal Data unless we are obligated under applicable law to retain it.","source_url":"https://www.gecko.security/privacy-policy","deep_link":"https://www.gecko.security/privacy-policy#:~:text=%20We%20retain%20Personal,law%20to%20retain%20it.","structural_citation":"§ 4 (Data Retention)","citation_basis":"section_number","char_start":2914,"char_end":3749}},{"pattern_key":"arbitration_or_class_waiver","pattern_family":"dispute_resolution","risk_rating":"medium","confidence":"medium","stance_key":"dispute_terms","stance_value":"arbitration_or_waiver","evidence":"PLEASE BE AWARE THAT THIS AGREEMENT CONTAINS PROVISIONS GOVERNING HOW TO RESOLVE DISPUTES BETWEEN PROVIDER AND COMPANY. AMONG OTHER THINGS, SECTION 12.3 INCLUDES AN AGREEMENT TO ARBITRATE WHICH REQUIRES, WITH LIMITED EXCEPTIONS, THAT ALL DISPUTES BETWEEN CUSTOMER AND PROVIDER SHALL BE RESOLVED BY BINDING AND FINAL ARBITRATION.","reason":"The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"governing_law_disputes","quote":"PLEASE BE AWARE THAT THIS AGREEMENT CONTAINS PROVISIONS GOVERNING HOW TO RESOLVE DISPUTES BETWEEN PROVIDER AND COMPANY. AMONG OTHER THINGS, SECTION 12.3 INCLUDES AN AGREEMENT TO ARBITRATE WHICH REQUIRES, WITH LIMITED EXCEPTIONS, THAT ALL DISPUTES BETWEEN CUSTOMER AND PROVIDER SHALL BE RESOLVED BY BINDING AND FINAL ARBITRATION.","source_url":"https://www.gecko.security/terms-of-service","deep_link":"https://www.gecko.security/terms-of-service#:~:text=%20PLEASE%20BE%20AWARE,BINDING%20AND%20FINAL%20ARBITRATION.","structural_citation":"Terms of Service › “Last revised on: May 13, 2026”","citation_basis":"heading_path","char_start":1718,"char_end":2047}},{"pattern_key":"arbitration_or_class_waiver","pattern_family":"dispute_resolution","risk_rating":"medium","confidence":"medium","stance_key":"dispute_terms","stance_value":"arbitration_or_waiver","evidence":"The parties will arbitrate any dispute about this Agreement in the state or county that encompasses the Chosen Courts, in English, and agree to finally settle all such disputes according to the Rules of the Judicial Arbitration and Mediation Service (\"JAMS\"). To the extent the JAMS streamlined rules are available, they will apply. The arbitral decision may be enforced in any court. To the extent a claim cannot leg...","reason":"The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"governing_law_disputes","quote":"The parties will arbitrate any dispute about this Agreement in the state or county that encompasses the Chosen Courts, in English, and agree to finally settle all such disputes according to the Rules of the Judicial Arbitration and Mediation Service (\"JAMS\"). To the extent the JAMS streamlined rules are available, they will apply. The arbitral decision may be enforced in any court. To the extent a claim cannot legally be arbitrated (as determined by an arbitrator), the parties will bring the suit, action, or proceeding that cannot be arbitrated in the Chosen Courts and each party irrevocably submits to the exclusive jurisdiction of the Chosen Courts. \"Chosen Courts\" means New Castle County, Delaware. Delaware law shall govern any disputes.","source_url":"https://www.gecko.security/terms-of-service","deep_link":"https://www.gecko.security/terms-of-service#:~:text=%20The%20parties%20will,shall%20govern%20any%20disputes.","structural_citation":"Terms of Service › “Arbitration.”","citation_basis":"heading_path","char_start":26591,"char_end":27341}},{"pattern_key":"sublicensable_or_transferable_license","pattern_family":"ip_license","risk_rating":"high","confidence":"high","stance_key":"content_license","stance_value":"sublicensable_or_transferable","evidence":"Customer hereby grants Provider a perpetual, irrevocable, worldwide, royalty-free, sublicensable, transferable license to use, for any commercial purpose, freely and without any restriction or obligation, Service Data.","reason":"The clause includes sublicensable, transferable, or assignable rights.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"training_use","quote":"Customer hereby grants Provider a perpetual, irrevocable, worldwide, royalty-free, sublicensable, transferable license to use, for any commercial purpose, freely and without any restriction or obligation, Service Data.","source_url":"https://www.gecko.security/terms-of-service","deep_link":"https://www.gecko.security/terms-of-service#:~:text=%20Customer%20hereby%20grants,or%20obligation%2C%20Service%20Data.","structural_citation":"Terms of Service › “Service Data.”","citation_basis":"heading_path","char_start":3753,"char_end":3972}},{"pattern_key":"sublicensable_or_transferable_license","pattern_family":"ip_license","risk_rating":"high","confidence":"medium","stance_key":"content_license","stance_value":"sublicensable_or_transferable","evidence":"Customer hereby grants Provider a perpetual, irrevocable, worldwide, royalty-free, sublicensable, transferable license to use, for any commercial purpose, freely and without any restriction or obligation, Service Data.","reason":"The clause includes sublicensable, transferable, or assignable rights.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"commercial_use","quote":"Customer hereby grants Provider a perpetual, irrevocable, worldwide, royalty-free, sublicensable, transferable license to use, for any commercial purpose, freely and without any restriction or obligation, Service Data.","source_url":"https://www.gecko.security/terms-of-service","deep_link":"https://www.gecko.security/terms-of-service#:~:text=%20Customer%20hereby%20grants,or%20obligation%2C%20Service%20Data.","structural_citation":"Terms of Service › “Service Data.”","citation_basis":"heading_path","char_start":3753,"char_end":3972}},{"pattern_key":"sublicensable_or_transferable_license","pattern_family":"ip_license","risk_rating":"high","confidence":"medium","stance_key":"content_license","stance_value":"sublicensable_or_transferable","evidence":"Except as expressly permitted by this Agreement, Customer will not (and will not allow anyone else to): (i) reverse engineer, decompile, or attempt to discover any source code or underlying ideas or algorithms of the Product (except to the extent Applicable Laws prohibit this restriction); (ii) provide, sell, transfer, sublicense, lend, distribute, rent, or otherwise allow others to access or use the Product; (iii...","reason":"The clause includes sublicensable, transferable, or assignable rights.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"commercial_use","quote":"Except as expressly permitted by this Agreement, Customer will not (and will not allow anyone else to): (i) reverse engineer, decompile, or attempt to discover any source code or underlying ideas or algorithms of the Product (except to the extent Applicable Laws prohibit this restriction); (ii) provide, sell, transfer, sublicense, lend, distribute, rent, or otherwise allow others to access or use the Product; (iii) remove any proprietary notices or labels; (iv) copy, modify, or create derivative works of the Product; (v) conduct security or vulnerability tests on, interfere with the operation of, cause performance degradation of, or circumvent access restrictions of the Product; (vi) access accounts, information, data, or portions of the Product to which Customer does not have explicit authorization; (vii) use the Product to develop a competing service or product; (viii) use the Product with any High Risk Activities or with any activity prohibited by Applicable Laws; (ix) use the Product to obtain unauthorized access to anyone else's networks or equipment; or (x) upload, submit, or otherwise make available to the Product any Customer Content to which Customer and Users do not have the proper rights.","source_url":"https://www.gecko.security/terms-of-service","deep_link":"https://www.gecko.security/terms-of-service#:~:text=%20Except%20as%20expressly,have%20the%20proper%20rights.","structural_citation":"Terms of Service › “Restrictions on Customer.”","citation_basis":"heading_path","char_start":6084,"char_end":7308}},{"pattern_key":"broad_content_license","pattern_family":"ip_license","risk_rating":"medium","confidence":"high","stance_key":"content_license","stance_value":"broad_license","evidence":"Customer hereby grants Provider a perpetual, irrevocable, worldwide, royalty-free, sublicensable, transferable license to use, for any commercial purpose, freely and without any restriction or obligation, Service Data.","reason":"The clause grants a broad content license.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"training_use","quote":"Customer hereby grants Provider a perpetual, irrevocable, worldwide, royalty-free, sublicensable, transferable license to use, for any commercial purpose, freely and without any restriction or obligation, Service Data.","source_url":"https://www.gecko.security/terms-of-service","deep_link":"https://www.gecko.security/terms-of-service#:~:text=%20Customer%20hereby%20grants,or%20obligation%2C%20Service%20Data.","structural_citation":"Terms of Service › “Service Data.”","citation_basis":"heading_path","char_start":3753,"char_end":3972}},{"pattern_key":"broad_content_license","pattern_family":"ip_license","risk_rating":"medium","confidence":"medium","stance_key":"content_license","stance_value":"broad_license","evidence":"Customer hereby grants Provider a perpetual, irrevocable, worldwide, royalty-free, sublicensable, transferable license to use, for any commercial purpose, freely and without any restriction or obligation, Service Data.","reason":"The clause grants a broad content license.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"commercial_use","quote":"Customer hereby grants Provider a perpetual, irrevocable, worldwide, royalty-free, sublicensable, transferable license to use, for any commercial purpose, freely and without any restriction or obligation, Service Data.","source_url":"https://www.gecko.security/terms-of-service","deep_link":"https://www.gecko.security/terms-of-service#:~:text=%20Customer%20hereby%20grants,or%20obligation%2C%20Service%20Data.","structural_citation":"Terms of Service › “Service Data.”","citation_basis":"heading_path","char_start":3753,"char_end":3972}},{"pattern_key":"liability_limitation","pattern_family":"legal_burden","risk_rating":"medium","confidence":"high","stance_key":"legal_burden","stance_value":"liability_limited","evidence":"If Provider breaches the warranty in Section 6.3 (Representations & Warranties from Provider), Customer must give Provider notice (with enough detail for Provider to understand or replicate the issue) within 45 days of discovering the issue. Within 45 days of receiving sufficient details of the warranty issue, Provider will attempt to restore the general functionality of the Service. If Provider cannot resolve the...","reason":"The clause limits liability or disclaims warranties.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"indemnity_liability","quote":"If Provider breaches the warranty in Section 6.3 (Representations & Warranties from Provider), Customer must give Provider notice (with enough detail for Provider to understand or replicate the issue) within 45 days of discovering the issue. Within 45 days of receiving sufficient details of the warranty issue, Provider will attempt to restore the general functionality of the Service. If Provider cannot resolve the issue, Customer may terminate the affected Subscription and Provider will pay to Customer a prorated refund of prepaid Fees for the remainder of the Subscription Period. Provider's restoration obligation, and Customer's termination right, are Customer's only remedies if Provider does not meet the warranty in Section 6.3 (Representations & Warranties from Provider).","source_url":"https://www.gecko.security/terms-of-service","deep_link":"https://www.gecko.security/terms-of-service#:~:text=%20If%20Provider%20breaches,%26%20Warranties%20from%20Provider).","structural_citation":"Terms of Service › “Provider Warranty Remedy.”","citation_basis":"heading_path","char_start":15689,"char_end":16490}},{"pattern_key":"liability_limitation","pattern_family":"legal_burden","risk_rating":"medium","confidence":"high","stance_key":"legal_burden","stance_value":"liability_limited","evidence":"Provider makes no guarantees that the Product will always be safe, secure, or error-free, or that it will function without disruptions, delays, or imperfections. THE CLOUD SERVICE IS AN AI-ENABLED INFORMATION SECURITY TOOL DESIGNED TO SUPPORT IN IDENTIFYING VULNERABILITIES, GAPS, AND SECURITY RISKS; SUCH ACTIVITIES ARE INHERENTLY HIGH-RISK AND THE PRODUCT ABSOLUTELY WILL NOT IDENTIFY ALL VULNERABILITIES, RISKS, OR...","reason":"The clause limits liability or disclaims warranties.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"indemnity_liability","quote":"Provider makes no guarantees that the Product will always be safe, secure, or error-free, or that it will function without disruptions, delays, or imperfections. THE CLOUD SERVICE IS AN AI-ENABLED INFORMATION SECURITY TOOL DESIGNED TO SUPPORT IN IDENTIFYING VULNERABILITIES, GAPS, AND SECURITY RISKS; SUCH ACTIVITIES ARE INHERENTLY HIGH-RISK AND THE PRODUCT ABSOLUTELY WILL NOT IDENTIFY ALL VULNERABILITIES, RISKS, OR ISSUES, AND WILL NOT BE ERROR-FREE. ALL OUTPUTS, FINDINGS, RECOMMENDATIONS, RESULTS, AND IN EACH CASE, THE LACK THEREOF, GENERATED BY THE PRODUCT MUST BE REVIEWED AND VALIDATED BY QUALIFIED HUMAN SECURITY PROFESSIONALS BEFORE BEING ACTED UPON. GECKO DOES NOT GUARANTEE THAT USE OF THE PRODUCT WILL PREVENT ANY SECURITY INCIDENT, DATA BREACH, CYBERATTACK, OR OTHER HARM. The warranties in Section 6 (Representations & Warranties) do not apply to any misuse or unauthorized modification of the Product, nor to any product or service provided by anyone other than Gecko. Except for the warranties in Section 6 (Representations & Warranties), Provider and Customer each disclaim all other warranties and conditions, whether express or implied, including the implied warranties and conditions of merchantability, fitness for a particular purpose, title, and non-infringement. These disclaimers apply to the maximum extent permitted by Applicable Laws.","source_url":"https://www.gecko.security/terms-of-service","deep_link":"https://www.gecko.security/terms-of-service#:~:text=%20Provider%20makes%20no,permitted%20by%20Applicable%20Laws.","structural_citation":"Terms of Service › “Disclaimer of Warranties”","citation_basis":"heading_path","char_start":16528,"char_end":17893}},{"pattern_key":"indemnity_obligation","pattern_family":"legal_burden","risk_rating":"medium","confidence":"high","stance_key":"legal_burden","stance_value":"indemnity","evidence":"Except with respect to AI Features or Outputs, Provider will indemnify, defend, and hold harmless Customer from and against all Provider Covered Claims made by someone other than Customer, Customer's Affiliates, or Users, and all out-of-pocket damages, awards, settlements, costs, and expenses, including reasonable attorneys' fees and other legal expenses, that arise from the Provider Covered Claims.","reason":"The clause requires defense, indemnity, or hold-harmless obligations.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"indemnity_liability","quote":"Except with respect to AI Features or Outputs, Provider will indemnify, defend, and hold harmless Customer from and against all Provider Covered Claims made by someone other than Customer, Customer's Affiliates, or Users, and all out-of-pocket damages, awards, settlements, costs, and expenses, including reasonable attorneys' fees and other legal expenses, that arise from the Provider Covered Claims.","source_url":"https://www.gecko.security/terms-of-service","deep_link":"https://www.gecko.security/terms-of-service#:~:text=%20Except%20with%20respect,the%20Provider%20Covered%20Claims.","structural_citation":"Terms of Service › “Protection by Provider.”","citation_basis":"heading_path","char_start":19289,"char_end":19702}},{"pattern_key":"indemnity_obligation","pattern_family":"legal_burden","risk_rating":"medium","confidence":"high","stance_key":"legal_burden","stance_value":"indemnity","evidence":"Customer will indemnify, defend, and hold harmless Provider from and against all Customer Covered Claims made by someone other than Provider or its Affiliates, and all out-of-pocket damages, awards, settlements, costs, and expenses, including reasonable attorneys' fees and other legal expenses, that arise from the Customer Covered Claims.","reason":"The clause requires defense, indemnity, or hold-harmless obligations.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"indemnity_liability","quote":"Customer will indemnify, defend, and hold harmless Provider from and against all Customer Covered Claims made by someone other than Provider or its Affiliates, and all out-of-pocket damages, awards, settlements, costs, and expenses, including reasonable attorneys' fees and other legal expenses, that arise from the Customer Covered Claims.","source_url":"https://www.gecko.security/terms-of-service","deep_link":"https://www.gecko.security/terms-of-service#:~:text=%20Customer%20will%20indemnify%2C,the%20Customer%20Covered%20Claims.","structural_citation":"Terms of Service › “Protection by Customer.”","citation_basis":"heading_path","char_start":19739,"char_end":20085}},{"pattern_key":"third_party_sharing","pattern_family":"privacy_sharing","risk_rating":"medium","confidence":"high","stance_key":"data_sharing","stance_value":"third_party_or_vendor_sharing","evidence":"We may share your information with: Service providers (e.g. hosting, analytics, payment processors) acting on our behalf; Professional advisers (e.g. legal, accounting firms) under confidentiality obligations; Persons or entities with whom you request that we share your information. Courts, law enforcement, regulators, government agencies or other parties where it is reasonably necessary for the establishment, exe...","reason":"The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"subprocessors_data_sharing","quote":"We may share your information with: Service providers (e.g. hosting, analytics, payment processors) acting on our behalf; Professional advisers (e.g. legal, accounting firms) under confidentiality obligations; Persons or entities with whom you request that we share your information. Courts, law enforcement, regulators, government agencies or other parties where it is reasonably necessary for the establishment, exercise or defense of a claim, protecting our rights or the rights of our users, or is required by laws or regulations to which we are subject. In some instances, we process Personal Data on behalf of our customers and delegate certain functions to service providers that process Personal Data on our behalf (“subprocessors”). A current list of our subprocessors and their roles is available on our website. We conduct due diligence and impose contractual data protection requirements on all of our subprocessors.","source_url":"https://www.gecko.security/privacy-policy","deep_link":"https://www.gecko.security/privacy-policy#:~:text=%20We%20may%20share,all%20of%20our%20subprocessors.","structural_citation":"§ 5 (Third-Party Sharing & Subprocessors)","citation_basis":"section_number","char_start":3798,"char_end":4732}},{"pattern_key":"third_party_sharing","pattern_family":"privacy_sharing","risk_rating":"medium","confidence":"medium","stance_key":"data_sharing","stance_value":"third_party_or_vendor_sharing","evidence":"Customer will not (and will not allow anyone else to) submit Prohibited Data to the Product or through the Cloud Services unless authorized expressly in writing by Provider. In any case, prior to providing any Prohibited Data or Personal Data to Provider, Customer hereby covenants to provide privacy notices to and obtain informed consents from all applicable third parties.","reason":"The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"privacy_data_use","quote":"Customer will not (and will not allow anyone else to) submit Prohibited Data to the Product or through the Cloud Services unless authorized expressly in writing by Provider. In any case, prior to providing any Prohibited Data or Personal Data to Provider, Customer hereby covenants to provide privacy notices to and obtain informed consents from all applicable third parties.","source_url":"https://www.gecko.security/terms-of-service","deep_link":"https://www.gecko.security/terms-of-service#:~:text=%20Customer%20will%20not,all%20applicable%20third%20parties.","structural_citation":"Terms of Service › “Prohibited Data.”","citation_basis":"heading_path","char_start":8429,"char_end":8805}},{"pattern_key":"tier_condition","pattern_family":"tier_conditionality","risk_rating":"medium","confidence":"high","stance_key":"tier_condition","stance_value":"rights_or_controls_vary_by_tier","evidence":"From time to time, Customer may subscribe for Cloud Services by indicating the subscription period (in each case, the \"Subscription Period\"), fees (\"Fees\") and scope of services that they assent to on the Site or Product (together, the \"Subscription\"). All Subscriptions are governed by this Agreement. Fees for such Subscription(s) are as indicated on the Site or Product, and are denominated in U.S. Dollars and are...","reason":"The clause changes rights, controls, or obligations by plan or tier.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"tier_differences","quote":"From time to time, Customer may subscribe for Cloud Services by indicating the subscription period (in each case, the \"Subscription Period\"), fees (\"Fees\") and scope of services that they assent to on the Site or Product (together, the \"Subscription\"). All Subscriptions are governed by this Agreement. Fees for such Subscription(s) are as indicated on the Site or Product, and are denominated in U.S. Dollars and are exclusive of taxes. Except for the prorated refund of prepaid Fees allowed with specific termination rights given in the Agreement, Fees are non-refundable. If Customer fails to pay any Fees when due, Gecko reserves the right to charge interest on the overdue amount at a rate of 1.5% per month (or the maximum rate permitted by applicable law, whichever is lower), accruing from the due date until paid in full.","source_url":"https://www.gecko.security/terms-of-service","deep_link":"https://www.gecko.security/terms-of-service#:~:text=%20From%20time%20to,until%20paid%20in%20full.","structural_citation":"Terms of Service › “Fees.”","citation_basis":"heading_path","char_start":8851,"char_end":9682}},{"pattern_key":"training_permitted","pattern_family":"training_use","risk_rating":"high","confidence":"medium","stance_key":"model_training","stance_value":"training_permitted","evidence":"Customer Content may not be used to develop, train, or enhance artificial intelligence or machine learning models that are part of Provider's products and services, including third-party components of the Product, except for Customer's sole benefit. Due to the nature of artificial intelligence and machine learning, information generated by these features (\"Outputs\") may be incorrect, inaccurate or unorig...","reason":"The clause permits using submitted content for training, development, or model/service improvement.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"training_use","quote":"Customer Content may not be used to develop, train, or enhance artificial intelligence or machine learning models that are part of Provider's products and services, including third-party components of the Product, except for Customer's sole benefit. Due to the nature of artificial intelligence and machine learning, information generated by these features (\"Outputs\") may be incorrect, inaccurate or unoriginal. Outputs are not a substitute for human oversight and should be independently reviewed before use. Customer agrees and acknowledge that the Services rely on the use of third party large language models and related artificial intelligence services (the \"Third Party LLMs\"). Use of the Services is further subject to terms of service for providers of such Third Party LLMs (\"Third Party Terms\"), and Customer is responsible for reviewing such Third Party Terms, and hereby consents to and agrees to be bound by such Third Party Terms, which include without limitation: Third Party LLM Commercial Terms, as of the date last published OpenAI https://openai.com/policies/services-agreement/ https://openai.com/policies/","source_url":"https://www.gecko.security/terms-of-service","deep_link":"https://www.gecko.security/terms-of-service#:~:text=%20Customer%20Content%20may,OpenAI%20https%3A%2F%2Fopenai.com%2Fpolicies%2Fservices-agreement%2F%20https%3A%2F%2Fopenai.com%2Fpolicies%2F%20","structural_citation":"Terms of Service › “Machine Learning.”","citation_basis":"heading_path","char_start":4003,"char_end":5147}}]},"tier_conditions":[{"tier":"Business","surface":"audit_rights_dpa_residency","verdict":"improves","confidence":"high","citation_count":1,"citations":[{"finding_id":"acefb644-24a3-467a-b0cf-9067385ac607","quote":" This section of our Privacy Policy applies if you use our Services in the European Union (EU) or United Kingdom (UK) and we act as a “controller” (as explained below).\n With respect to certain operational functions which are part of our Services, we act as a controller (i.e., we determine the purposes and means of processing your Personal Data). Such functions include but are not limited to administering and maintaining your account with us and responding to inquiries that you send to us.\n You are not obligated to provide us with your Personal Data, however, if you choose not to provide your Personal Data to us, you may not be able to use some or all of our Services.\n Your Personal Data is processed for the purposes described in the section of this Privacy Policy titled “How We Use Your Information” and is shared with recipients listed under the section titled “Third-Party Recipients & Subprocessors.”\n Where we process your Personal Data or your Personal Data is processed on our behalf, we rely on one or more of the following lawful bases:\n Contractual necessity: to perform our obligations under any agreement with you;\n Legal obligation: to comply with applicable laws and regulations;\n Legitimate interests: for our business operations (e.g. security, fraud prevention, service improvements), provided your rights do not override those interests;\n Consent: where you have explicitly agreed to certain processing (e.g. processing to communicate with you).\n","source_url":"https://www.gecko.security/privacy-policy","deep_link":"https://www.gecko.security/privacy-policy#:~:text=%20This%20section%20of,communicate%20with%20you).%20","structural_citation":"§ 6 (EU/UK Data Protection)"}]},{"tier":"Government","surface":"subprocessors_data_sharing","verdict":"unknown","confidence":"high","citation_count":1,"citations":[{"finding_id":"2a5ff492-f974-4edc-af5b-c6ea54f61a6f","quote":" We may share your information with:\n Service providers (e.g. hosting, analytics, payment processors) acting on our behalf;\n Professional advisers (e.g. legal, accounting firms) under confidentiality obligations;\n Persons or entities with whom you request that we share your information.\n Courts, law enforcement, regulators, government agencies or other parties where it is reasonably necessary for the establishment, exercise or defense of a claim, protecting our rights or the rights of our users, or is required by laws or regulations to which we are subject.\n In some instances, we process Personal Data on behalf of our customers and delegate certain functions to service providers that process Personal Data on our behalf (“subprocessors”). A current list of our subprocessors and their roles is available on our website. We conduct due diligence and impose contractual data protection requirements on all of our subprocessors.","source_url":"https://www.gecko.security/privacy-policy","deep_link":"https://www.gecko.security/privacy-policy#:~:text=%20We%20may%20share,all%20of%20our%20subprocessors.","structural_citation":"§ 5 (Third-Party Sharing & Subprocessors)"}]},{"tier":"Plus","surface":"data_retention","verdict":"conditional","confidence":"high","citation_count":1,"citations":[{"finding_id":"6a4c94f7-e7f2-4268-bb40-b008497dca3f","quote":" We retain Personal Data only for as long as necessary to fulfil the purposes described in this Privacy Policy. We retain the categories of data described below as follows:\n Account and profile data: retained for the duration of our customer relationship plus up to 2 years thereafter;\n Transactional and billing records: retained for at least 7 years to satisfy tax or audit requirements;\n Support correspondence and logs: retained for up to 3 years to ensure quality and traceability;\n Analytical/usage data: Non-Personal Data regarding usage of our Services may be retained indefinitely.\n Upon expiration of the relevant retention period for Personal Data or upon your valid request for erasure of your Personal Data, we will securely delete or anonymise your Personal Data unless we are obligated under applicable law to retain it.","source_url":"https://www.gecko.security/privacy-policy","deep_link":"https://www.gecko.security/privacy-policy#:~:text=%20We%20retain%20Personal,law%20to%20retain%20it.","structural_citation":"§ 4 (Data Retention)"}]},{"tier":"Standard","surface":"audit_rights_dpa_residency","verdict":"conditional","confidence":"high","citation_count":2,"citations":[{"finding_id":"f1645fd7-5162-429d-8835-c7921d32a9e1","quote":"In such cases, we ensure the transfer of your Personal Data occurs pursuant to a lawful transfer mechanism under applicable law, which may include without limitation:\n Standard Contractual Clauses;","source_url":"https://www.gecko.security/privacy-policy","deep_link":"https://www.gecko.security/privacy-policy#:~:text=In%20such%20cases%2C%20we,limitation%3A%20Standard%20Contractual%20Clauses%3B","structural_citation":"§ 6 (EU/UK Data Protection)"},{"finding_id":"088f86ff-c5e5-4ced-b353-423f97d9b57b","quote":" Other lawful transfer mechanisms under applicable data-protection laws.\n In cases where we transfer or receive your Personal Data in accordance with Standard Contractual Clauses, you may request a copy of such clauses or be informed of where they are accessible. To make such a request, please contact us at gecko@gecko.security .\n For details on how long we store your Personal Data, please refer to the “Data Retention” section above.\n If you have a concern regarding the processing of your Personal Data, you may contact us at gecko@gecko.security or you may lodge a complaint with the applicable data protection authority in the country in which you are located. For a listing of EU data protection authorities and their contact details, please visit https://www.edpb.europa.eu/about-edpb/about-edpb/members_en . If you are located in the UK, you may contact the Information Commissioner’s Office (ICO) via the following link: https://ico.org.uk/make-a-complaint/data-protection-complaints/ .","source_url":"https://www.gecko.security/privacy-policy","deep_link":"https://www.gecko.security/privacy-policy#:~:text=%20Other%20lawful%20transfer,following%20link%3A%20https%3A%2F%2Fico.org.uk%2Fmake-a-complaint%2Fdata-protection-complaints%2F%20.","structural_citation":"Privacy Policy › “Adequacy decisions for the recipient country; or”"}]},{"tier":"Standard","surface":"privacy_data_use","verdict":"unknown","confidence":"high","citation_count":2,"citations":[{"finding_id":"6e4e2f16-7785-4764-b779-610d66fb20bc","quote":" We follow standard industry procedures in using log files. These files record visitors’ interactions with our website, capturing details such as your browser type, ISP, date and time of access, referring/exit pages, and click counts. This information is Non-Personal Data. We use this data to analyze trends, administer the website, track user movements, and gather general demographic data.","source_url":"https://www.gecko.security/privacy-policy","deep_link":"https://www.gecko.security/privacy-policy#:~:text=%20We%20follow%20standard,gather%20general%20demographic%20data.","structural_citation":"§ 10 (Log Files)"},{"finding_id":"38838e9b-bb6b-4fab-b53a-b2fa77c713e0","quote":" We take the protection of your Personal Data seriously and employ industry-standard security measures, including encryption, regular penetration tests, and vulnerability assessments to protect Personal Data. While we strive to safeguard all Personal Data, no system can be 100% secure and we cannot guarantee that unauthorized access to Personal Data will never occur.","source_url":"https://www.gecko.security/privacy-policy","deep_link":"https://www.gecko.security/privacy-policy#:~:text=%20We%20take%20the,Data%20will%20never%20occur.","structural_citation":"§ 13 (Security Practices)"}]}],"disclaimer":"Informational only, not legal advice. Every finding is a verbatim quote from a fully-read, gate-verified document; verify via snapshot_sha256 + wayback_url. Partially-verified platforms show findings only from their verified document(s).","benchmark":{"disclaimer":"Automated assessment against a published rubric — not legal advice.","bands":[]},"@jsonld":{"@context":"https://schema.org","@type":"Dataset","name":"Gecko Security — AI policy risk findings","description":"Verified, cited policy findings for Gecko Security across 13 risk surfaces.","url":"https://airinetwork.com/platform/gecko-security","creator":{"@type":"Organization","name":"AIRIN","url":"https://airinetwork.com"},"isAccessibleForFree":true,"license":"https://airinetwork.com/terms","additionalProperty":[{"@type":"PropertyValue","name":"verification","value":"fully_verified"},{"@type":"PropertyValue","name":"tier_condition_count","value":5}],"hasPart":[{"@type":"Quotation","@id":"https://airinetwork.com/platform/gecko-security/finding/privacy-data-use-744c625a15b54abd1ae8","text":" At Gecko Security, Inc. (“we,” “our,” or “us”), safeguarding the privacy of our users and visitors (“you”) is one of our core priorities. This Privacy Policy outlines the types of information we collect, how we use and share it, and how we protect it when you interact with our website and services.\n If you have questions about this Privacy Policy or our privacy practices, please contact us at gecko@gecko.security .","isBasedOn":"https://www.gecko.security/privacy-policy","dateCreated":"2026-07-20T00:27:07.894452+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/gecko-security/finding/privacy-data-use-1074ac681ddc39d63289","text":" By using our website, applications, platforms and any of our associated online services (collectively, “Services”), you consent to this Privacy Policy and agree to its terms. If you do not agree with any part of this Privacy Policy, you should discontinue your use of our Services immediately.","isBasedOn":"https://www.gecko.security/privacy-policy","dateCreated":"2026-07-20T00:27:07.894452+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/gecko-security/finding/privacy-data-use-1329f77c4109d522945e","text":" As part of providing and improving our Services and for other purposes as noted in this Privacy Policy, we collect both data that identifies you, directly or indirectly (“Personal Data”) and data that does not identify you and which cannot reasonably be used to identify you (“Non-Personal Data”). Specifically, we collect Personal Data and Non-Personal Data as follows:\n Personal Data: The Personal Data we collect may include, without limitation, your name, email address, phone number, company name, online identifiers (such as IP address) and any other information you provide directly when contacting us or engaging with our Services.\n Non-Personal Data: We automatically collect certain Non-Personal Data when you interact with our website, such as browser type, referring/exit pages, and the date and time of your visit. This information is gathered through cookies and similar tracking technologies.\n If you contact us directly, we may collect additional information, including any attachments or details you provide.","isBasedOn":"https://www.gecko.security/privacy-policy","dateCreated":"2026-07-20T00:27:07.894452+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/gecko-security/finding/privacy-data-use-a06265be8439618e44f2","text":" We use the information we collect in the following ways:\n To operate and maintain our Services, such as maintaining your account with us and providing you technical assistance with respect to your use of the Services.\n To improve our Services.\n To personalize your experience and tailor content to your preferences.\n To respond to you when you contact us directly with an inquiry or other communication.\n To understand and analyze website usage and user behavior.\n To develop new products, services, and features.\n To send you newsletters and updates about us and our Services where you have chosen to receive such materials.\n To prevent fraud and maintain the security of our Services.\n To monitor compliance with this Privacy Policy and our Terms of Service and enforce them.\n To exercise or defend our legal rights and to comply with subpoenas, court orders or other legal process.\n To comply with laws and regulations that apply to us.","isBasedOn":"https://www.gecko.security/privacy-policy","dateCreated":"2026-07-20T00:27:07.894452+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/gecko-security/finding/privacy-data-use-58b2327da9f2bb39539b","text":" Like most website operators, we use cookies, web beacons and similar technologies to store information about visitors’ preferences and track the pages they visit on our website. Cookies help us optimise user experience by customising web content based on browser type or other information.\n You can choose to disable cookies through your browser settings. However, please note that disabling cookies may affect your ability to fully interact with our website and use our Services.","isBasedOn":"https://www.gecko.security/privacy-policy","dateCreated":"2026-07-20T00:27:07.894452+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/gecko-security/finding/privacy-data-use-8b2ac1cc60be50e1c143","text":" In addition to other requests described in this Privacy Policy which you may make regarding your Personal Data (as applicable), you may be entitled to exercise control over or make certain choices relating to your Personal Data depending on applicable laws and regulations and the functionalities we offer. For example, you may access, correct or delete your Personal Data via your account dashboard or by contacting us at gecko@gecko.security . You may also opt out of marketing emails we send to you by using the unsubscribe link in such emails. If you contact us to make any requests in relation to your Personal Data, we will respond to you as required by applicable law.","isBasedOn":"https://www.gecko.security/privacy-policy","dateCreated":"2026-07-20T00:27:07.894452+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/gecko-security/finding/privacy-data-use-6bf08852d29c02fe06c0","text":" We follow standard industry procedures in using log files. These files record visitors’ interactions with our website, capturing details such as your browser type, ISP, date and time of access, referring/exit pages, and click counts. This information is Non-Personal Data. We use this data to analyze trends, administer the website, track user movements, and gather general demographic data.","isBasedOn":"https://www.gecko.security/privacy-policy","dateCreated":"2026-07-20T00:27:07.894452+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/gecko-security/finding/privacy-data-use-b36f7e378157d9d9f7e8","text":" We do not knowingly collect Personal Data from children under the age of 13. If you believe that a child under 13 has provided us with Personal Data, please contact us immediately, and we will promptly take steps to remove such Personal Data from our records.","isBasedOn":"https://www.gecko.security/privacy-policy","dateCreated":"2026-07-20T00:27:07.894452+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/gecko-security/finding/privacy-data-use-1b15d25904bc417a8470","text":" We take the protection of your Personal Data seriously and employ industry-standard security measures, including encryption, regular penetration tests, and vulnerability assessments to protect Personal Data. While we strive to safeguard all Personal Data, no system can be 100% secure and we cannot guarantee that unauthorized access to Personal Data will never occur.","isBasedOn":"https://www.gecko.security/privacy-policy","dateCreated":"2026-07-20T00:27:07.894452+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/gecko-security/finding/privacy-data-use-3e05c789140bc8ecb331","text":" We may update this Privacy Policy from time to time. Any changes will be posted on this page, and significant changes will be communicated to you through email or by a prominent notice on our website. Your continued use of our Services after such updates signifies your acceptance of the updated Privacy Policy.","isBasedOn":"https://www.gecko.security/privacy-policy","dateCreated":"2026-07-20T00:27:07.894452+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/gecko-security/finding/privacy-data-use-2494909bfac111557b03","text":" For questions about this Privacy Policy or to exercise your rights, please contact us at:\n Email: gecko@gecko.security \n Mailing Address: \n Gecko Security, Inc.","isBasedOn":"https://www.gecko.security/privacy-policy","dateCreated":"2026-07-20T00:27:07.894452+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/gecko-security/finding/data-retention-e676f5ca51c8910399bd","text":" We retain Personal Data only for as long as necessary to fulfil the purposes described in this Privacy Policy. We retain the categories of data described below as follows:\n Account and profile data: retained for the duration of our customer relationship plus up to 2 years thereafter;\n Transactional and billing records: retained for at least 7 years to satisfy tax or audit requirements;\n Support correspondence and logs: retained for up to 3 years to ensure quality and traceability;\n Analytical/usage data: Non-Personal Data regarding usage of our Services may be retained indefinitely.\n Upon expiration of the relevant retention period for Personal Data or upon your valid request for erasure of your Personal Data, we will securely delete or anonymise your Personal Data unless we are obligated under applicable law to retain it.","isBasedOn":"https://www.gecko.security/privacy-policy","dateCreated":"2026-07-20T00:27:07.894452+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/gecko-security/finding/indemnity-liability-74978f4a58c673ef696d","text":" Our Services may include links to third party websites. Please note that such links are provided for convenience only and we do not endorse or recommend such third party websites and are not responsible for the privacy practices of third party website operators. When you access a third party’s website, you may be bound by the privacy policies and practices of that third party and we encourage you to read the privacy policies on any third party websites you visit.","isBasedOn":"https://www.gecko.security/privacy-policy","dateCreated":"2026-07-20T00:27:07.894452+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/gecko-security/finding/subprocessors-data-sharing-6a956cbfa4d17f419fa7","text":" We may share your information with:\n Service providers (e.g. hosting, analytics, payment processors) acting on our behalf;\n Professional advisers (e.g. legal, accounting firms) under confidentiality obligations;\n Persons or entities with whom you request that we share your information.\n Courts, law enforcement, regulators, government agencies or other parties where it is reasonably necessary for the establishment, exercise or defense of a claim, protecting our rights or the rights of our users, or is required by laws or regulations to which we are subject.\n In some instances, we process Personal Data on behalf of our customers and delegate certain functions to service providers that process Personal Data on our behalf (“subprocessors”). A current list of our subprocessors and their roles is available on our website. We conduct due diligence and impose contractual data protection requirements on all of our subprocessors.","isBasedOn":"https://www.gecko.security/privacy-policy","dateCreated":"2026-07-20T00:27:07.894452+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/gecko-security/finding/audit-rights-dpa-residency-234a52aff678db8215a6","text":" This section of our Privacy Policy applies if you use our Services in the European Union (EU) or United Kingdom (UK) and we act as a “controller” (as explained below).\n With respect to certain operational functions which are part of our Services, we act as a controller (i.e., we determine the purposes and means of processing your Personal Data). Such functions include but are not limited to administering and maintaining your account with us and responding to inquiries that you send to us.\n You are not obligated to provide us with your Personal Data, however, if you choose not to provide your Personal Data to us, you may not be able to use some or all of our Services.\n Your Personal Data is processed for the purposes described in the section of this Privacy Policy titled “How We Use Your Information” and is shared with recipients listed under the section titled “Third-Party Recipients & Subprocessors.”\n Where we process your Personal Data or your Personal Data is processed on our behalf, we rely on one or more of the following lawful bases:\n Contractual necessity: to perform our obligations under any agreement with you;\n Legal obligation: to comply with applicable laws and regulations;\n Legitimate interests: for our business operations (e.g. security, fraud prevention, service improvements), provided your rights do not override those interests;\n Consent: where you have explicitly agreed to certain processing (e.g. processing to communicate with you).\n","isBasedOn":"https://www.gecko.security/privacy-policy","dateCreated":"2026-07-20T00:27:07.894452+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/gecko-security/finding/audit-rights-dpa-residency-99815c15688bdd6a7e95","text":" Legal claims: where processing is necessary for the establishment, exercise or defense of legal claims.\n To the extent the processing of your Personal Data is based on your consent, you may withdraw your consent at any time. To withdraw your consent for the processing of your Personal Data, you may email us at gecko@gecko.security .\n As a data subject, you have the following rights:\n Right to Access: You can request access to or copies of your Personal Data.\n Right to Rectification: You can request corrections of inaccurate or incomplete Personal Data we maintain about you.\n Right to Erasure: You can request that we delete your Personal Data under certain conditions.\n Right to Restrict Processing: You can request that we limit the processing of your Personal Data.\n Right to Object: You can object to the processing of your Personal Data under certain conditions.\n Right to Data Portability: You can request that we transfer your Personal Data to another organisation or directly to you under certain conditions.\n Please note that the rights set forth above may be subject to certain limitations under applicable laws. We will notify you if we are not able to honor your request, in whole or in part, and we will otherwise respond to your request as required by applicable laws. If you wish to exercise any of the rights listed above, please contact us at gecko@gecko.security .\n Your Personal Data may be transferred or received by us outside the European Economic Area (EEA) or the UK. ","isBasedOn":"https://www.gecko.security/privacy-policy","dateCreated":"2026-07-20T00:27:07.894452+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/gecko-security/finding/audit-rights-dpa-residency-03e28ed4a4d801c3993a","text":"In such cases, we ensure the transfer of your Personal Data occurs pursuant to a lawful transfer mechanism under applicable law, which may include without limitation:\n Standard Contractual Clauses;","isBasedOn":"https://www.gecko.security/privacy-policy","dateCreated":"2026-07-20T00:27:07.894452+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/gecko-security/finding/audit-rights-dpa-residency-8547f52d6f4542241157","text":" Other lawful transfer mechanisms under applicable data-protection laws.\n In cases where we transfer or receive your Personal Data in accordance with Standard Contractual Clauses, you may request a copy of such clauses or be informed of where they are accessible. To make such a request, please contact us at gecko@gecko.security .\n For details on how long we store your Personal Data, please refer to the “Data Retention” section above.\n If you have a concern regarding the processing of your Personal Data, you may contact us at gecko@gecko.security or you may lodge a complaint with the applicable data protection authority in the country in which you are located. For a listing of EU data protection authorities and their contact details, please visit https://www.edpb.europa.eu/about-edpb/about-edpb/members_en . If you are located in the UK, you may contact the Information Commissioner’s Office (ICO) via the following link: https://ico.org.uk/make-a-complaint/data-protection-complaints/ .","isBasedOn":"https://www.gecko.security/privacy-policy","dateCreated":"2026-07-20T00:27:07.894452+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/gecko-security/finding/audit-rights-dpa-residency-793d86b6169ac2260d61","text":" We maintain independent attestation of our control environment, including SOC 2 compliance. In addition to encryption, penetration testing and regular vulnerability assessments, we undergo annual third-party audits to verify the effectiveness of our technical and organizational measures.","isBasedOn":"https://www.gecko.security/privacy-policy","dateCreated":"2026-07-20T00:27:07.894452+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11"}}],"variableMeasured":[{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" At Gecko Security, Inc. (“we,” “our,” or “us”), safeguarding the privacy of our users and visitors (“you”) is one of our core priorities. This Privacy Policy outlines the types of information we collect, how we use and share it, and how we protect it when you interact with our website and services.\n If you have questions about this Privacy Policy or our privacy practices, please contact us at gecko@gecko.security .","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.gecko.security/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Privacy Policy”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.gecko.security/privacy-policy#:~:text=%20At%20Gecko%20Security%2C,us%20at%20gecko%40gecko.security%20."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:27:07.894452+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" By using our website, applications, platforms and any of our associated online services (collectively, “Services”), you consent to this Privacy Policy and agree to its terms. If you do not agree with any part of this Privacy Policy, you should discontinue your use of our Services immediately.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.gecko.security/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 1 (Consent)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.gecko.security/privacy-policy#:~:text=%20By%20using%20our,of%20our%20Services%20immediately."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:27:07.894452+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" As part of providing and improving our Services and for other purposes as noted in this Privacy Policy, we collect both data that identifies you, directly or indirectly (“Personal Data”) and data that does not identify you and which cannot reasonably be used to identify you (“Non-Personal Data”). Specifically, we collect Personal Data and Non-Personal Data as follows:\n Personal Data: The Personal Data we collect may include, without limitation, your name, email address, phone number, company name, online identifiers (such as IP address) and any other information you provide directly when contacting us or engaging with our Services.\n Non-Personal Data: We automatically collect certain Non-Personal Data when you interact with our website, such as browser type, referring/exit pages, and the date and time of your visit. This information is gathered through cookies and similar tracking technologies.\n If you contact us directly, we may collect additional information, including any attachments or details you provide.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.gecko.security/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 2 (Information We Collect)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.gecko.security/privacy-policy#:~:text=%20As%20part%20of,or%20details%20you%20provide."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:27:07.894452+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" We use the information we collect in the following ways:\n To operate and maintain our Services, such as maintaining your account with us and providing you technical assistance with respect to your use of the Services.\n To improve our Services.\n To personalize your experience and tailor content to your preferences.\n To respond to you when you contact us directly with an inquiry or other communication.\n To understand and analyze website usage and user behavior.\n To develop new products, services, and features.\n To send you newsletters and updates about us and our Services where you have chosen to receive such materials.\n To prevent fraud and maintain the security of our Services.\n To monitor compliance with this Privacy Policy and our Terms of Service and enforce them.\n To exercise or defend our legal rights and to comply with subpoenas, court orders or other legal process.\n To comply with laws and regulations that apply to us.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.gecko.security/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 3 (How We Use Your Information)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.gecko.security/privacy-policy#:~:text=%20We%20use%20the,that%20apply%20to%20us."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:27:07.894452+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" Like most website operators, we use cookies, web beacons and similar technologies to store information about visitors’ preferences and track the pages they visit on our website. Cookies help us optimise user experience by customising web content based on browser type or other information.\n You can choose to disable cookies through your browser settings. However, please note that disabling cookies may affect your ability to fully interact with our website and use our Services.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.gecko.security/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 7 (Cookies and Web Beacons)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.gecko.security/privacy-policy#:~:text=%20Like%20most%20website,and%20use%20our%20Services."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:27:07.894452+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" In addition to other requests described in this Privacy Policy which you may make regarding your Personal Data (as applicable), you may be entitled to exercise control over or make certain choices relating to your Personal Data depending on applicable laws and regulations and the functionalities we offer. For example, you may access, correct or delete your Personal Data via your account dashboard or by contacting us at gecko@gecko.security . You may also opt out of marketing emails we send to you by using the unsubscribe link in such emails. If you contact us to make any requests in relation to your Personal Data, we will respond to you as required by applicable law.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.gecko.security/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 9 (User Controls & Preferences Regarding Personal Data)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.gecko.security/privacy-policy#:~:text=%20In%20addition%20to,required%20by%20applicable%20law."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:27:07.894452+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" We follow standard industry procedures in using log files. These files record visitors’ interactions with our website, capturing details such as your browser type, ISP, date and time of access, referring/exit pages, and click counts. This information is Non-Personal Data. We use this data to analyze trends, administer the website, track user movements, and gather general demographic data.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.gecko.security/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 10 (Log Files)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.gecko.security/privacy-policy#:~:text=%20We%20follow%20standard,gather%20general%20demographic%20data."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:27:07.894452+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" We do not knowingly collect Personal Data from children under the age of 13. If you believe that a child under 13 has provided us with Personal Data, please contact us immediately, and we will promptly take steps to remove such Personal Data from our records.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.gecko.security/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 12 (Children’s Information)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.gecko.security/privacy-policy#:~:text=%20We%20do%20not,Data%20from%20our%20records."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:27:07.894452+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" We take the protection of your Personal Data seriously and employ industry-standard security measures, including encryption, regular penetration tests, and vulnerability assessments to protect Personal Data. While we strive to safeguard all Personal Data, no system can be 100% secure and we cannot guarantee that unauthorized access to Personal Data will never occur.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.gecko.security/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 13 (Security Practices)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.gecko.security/privacy-policy#:~:text=%20We%20take%20the,Data%20will%20never%20occur."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:27:07.894452+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" We may update this Privacy Policy from time to time. Any changes will be posted on this page, and significant changes will be communicated to you through email or by a prominent notice on our website. Your continued use of our Services after such updates signifies your acceptance of the updated Privacy Policy.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.gecko.security/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 14 (Updates to This Privacy Policy)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.gecko.security/privacy-policy#:~:text=%20We%20may%20update,the%20updated%20Privacy%20Policy."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:27:07.894452+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" For questions about this Privacy Policy or to exercise your rights, please contact us at:\n Email: gecko@gecko.security \n Mailing Address: \n Gecko Security, Inc.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.gecko.security/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Contact Information”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.gecko.security/privacy-policy#:~:text=%20For%20questions%20about,Address%3A%20Gecko%20Security%2C%20Inc."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:27:07.894452+00:00"}]},{"@type":"PropertyValue","name":"data_retention","value":"medium","description":" We retain Personal Data only for as long as necessary to fulfil the purposes described in this Privacy Policy. We retain the categories of data described below as follows:\n Account and profile data: retained for the duration of our customer relationship plus up to 2 years thereafter;\n Transactional and billing records: retained for at least 7 years to satisfy tax or audit requirements;\n Support correspondence and logs: retained for up to 3 years to ensure quality and traceability;\n Analytical/usage data: Non-Personal Data regarding usage of our Services may be retained indefinitely.\n Upon expiration of the relevant retention period for Personal Data or upon your valid request for erasure of your Personal Data, we will securely delete or anonymise your Personal Data unless we are obligated under applicable law to retain it.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.gecko.security/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 4 (Data Retention)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.gecko.security/privacy-policy#:~:text=%20We%20retain%20Personal,law%20to%20retain%20it."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:27:07.894452+00:00"}]},{"@type":"PropertyValue","name":"indemnity_liability","value":"unknown","description":" Our Services may include links to third party websites. Please note that such links are provided for convenience only and we do not endorse or recommend such third party websites and are not responsible for the privacy practices of third party website operators. When you access a third party’s website, you may be bound by the privacy policies and practices of that third party and we encourage you to read the privacy policies on any third party websites you visit.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.gecko.security/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 11 (Links to Third Party Websites)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.gecko.security/privacy-policy#:~:text=%20Our%20Services%20may,party%20websites%20you%20visit."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:27:07.894452+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"medium","description":" We may share your information with:\n Service providers (e.g. hosting, analytics, payment processors) acting on our behalf;\n Professional advisers (e.g. legal, accounting firms) under confidentiality obligations;\n Persons or entities with whom you request that we share your information.\n Courts, law enforcement, regulators, government agencies or other parties where it is reasonably necessary for the establishment, exercise or defense of a claim, protecting our rights or the rights of our users, or is required by laws or regulations to which we are subject.\n In some instances, we process Personal Data on behalf of our customers and delegate certain functions to service providers that process Personal Data on our behalf (“subprocessors”). A current list of our subprocessors and their roles is available on our website. We conduct due diligence and impose contractual data protection requirements on all of our subprocessors.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.gecko.security/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 5 (Third-Party Sharing & Subprocessors)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.gecko.security/privacy-policy#:~:text=%20We%20may%20share,all%20of%20our%20subprocessors."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:27:07.894452+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"unknown","description":" This section of our Privacy Policy applies if you use our Services in the European Union (EU) or United Kingdom (UK) and we act as a “controller” (as explained below).\n With respect to certain operational functions which are part of our Services, we act as a controller (i.e., we determine the purposes and means of processing your Personal Data). Such functions include but are not limited to administering and maintaining your account with us and responding to inquiries that you send to us.\n You are not obligated to provide us with your Personal Data, however, if you choose not to provide your Personal Data to us, you may not be able to use some or all of our Services.\n Your Personal Data is processed for the purposes described in the section of this Privacy Policy titled “How We Use Your Information” and is shared with recipients listed under the section titled “Third-Party Recipients & Subprocessors.”\n Where we process your Personal Data or your Personal Data is processed on our behalf, we rely on one or more of the following lawful bases:\n Contractual necessity: to perform our obligations under any agreement with you;\n Legal obligation: to comply with applicable laws and regulations;\n Legitimate interests: for our business operations (e.g. security, fraud prevention, service improvements), provided your rights do not override those interests;\n Consent: where you have explicitly agreed to certain processing (e.g. processing to communicate with you).\n","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.gecko.security/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 6 (EU/UK Data Protection)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.gecko.security/privacy-policy#:~:text=%20This%20section%20of,communicate%20with%20you).%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:27:07.894452+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"unknown","description":" Legal claims: where processing is necessary for the establishment, exercise or defense of legal claims.\n To the extent the processing of your Personal Data is based on your consent, you may withdraw your consent at any time. To withdraw your consent for the processing of your Personal Data, you may email us at gecko@gecko.security .\n As a data subject, you have the following rights:\n Right to Access: You can request access to or copies of your Personal Data.\n Right to Rectification: You can request corrections of inaccurate or incomplete Personal Data we maintain about you.\n Right to Erasure: You can request that we delete your Personal Data under certain conditions.\n Right to Restrict Processing: You can request that we limit the processing of your Personal Data.\n Right to Object: You can object to the processing of your Personal Data under certain conditions.\n Right to Data Portability: You can request that we transfer your Personal Data to another organisation or directly to you under certain conditions.\n Please note that the rights set forth above may be subject to certain limitations under applicable laws. We will notify you if we are not able to honor your request, in whole or in part, and we will otherwise respond to your request as required by applicable laws. If you wish to exercise any of the rights listed above, please contact us at gecko@gecko.security .\n Your Personal Data may be transferred or received by us outside the European Economic Area (EEA) or the UK. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.gecko.security/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 6 (EU/UK Data Protection)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.gecko.security/privacy-policy#:~:text=%20Legal%20claims%3A%20where,or%20the%20UK.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:27:07.894452+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":"In such cases, we ensure the transfer of your Personal Data occurs pursuant to a lawful transfer mechanism under applicable law, which may include without limitation:\n Standard Contractual Clauses;","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.gecko.security/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 6 (EU/UK Data Protection)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.gecko.security/privacy-policy#:~:text=In%20such%20cases%2C%20we,limitation%3A%20Standard%20Contractual%20Clauses%3B"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:27:07.894452+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" Other lawful transfer mechanisms under applicable data-protection laws.\n In cases where we transfer or receive your Personal Data in accordance with Standard Contractual Clauses, you may request a copy of such clauses or be informed of where they are accessible. To make such a request, please contact us at gecko@gecko.security .\n For details on how long we store your Personal Data, please refer to the “Data Retention” section above.\n If you have a concern regarding the processing of your Personal Data, you may contact us at gecko@gecko.security or you may lodge a complaint with the applicable data protection authority in the country in which you are located. For a listing of EU data protection authorities and their contact details, please visit https://www.edpb.europa.eu/about-edpb/about-edpb/members_en . If you are located in the UK, you may contact the Information Commissioner’s Office (ICO) via the following link: https://ico.org.uk/make-a-complaint/data-protection-complaints/ .","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.gecko.security/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Adequacy decisions for the recipient country; or”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.gecko.security/privacy-policy#:~:text=%20Other%20lawful%20transfer,following%20link%3A%20https%3A%2F%2Fico.org.uk%2Fmake-a-complaint%2Fdata-protection-complaints%2F%20."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:27:07.894452+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"unknown","description":" We maintain independent attestation of our control environment, including SOC 2 compliance. In addition to encryption, penetration testing and regular vulnerability assessments, we undergo annual third-party audits to verify the effectiveness of our technical and organizational measures.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"d56571d19cb86424e054b824964f28b9138922e7093b0654e7afe863290acc11"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.gecko.security/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 8 (Security Certifications & Audits)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.gecko.security/privacy-policy#:~:text=%20We%20maintain%20independent,technical%20and%20organizational%20measures."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:27:07.894452+00:00"}]}]}}