What follows describes the information Fortify 24x7 keeps about your firm as our customer. Material belonging to the people your firm serves, which our lines sometimes encounter while doing the job you bought them for, is governed instead by the agreement between us. That agreement is stricter than any website notice, and it prevails wherever the two overlap.
01What is kept here
| Account | Names, email addresses, the firm, and whoever you nominate to receive an escalation, your Qualified Individual among them. These are the details required to switch a service on and to find a human being when something has gone wrong. |
|---|---|
| Billing | Records of the subscription and its receipts. Card numbers belong to Stripe from beginning to end and reach nothing we run. Visible to us: four final digits, and whether the charge cleared. |
| Operating metadata | The machines, servers, mailboxes, company files, and tenants under cover, together with job outcomes, detection history, patch condition, filtering records, and case threads. |
| Your clients' information | Where a line meets it, in a discovery finding or a recovery set, say, it lies under AES at 256 bits and travels under TLS, on infrastructure separate from whatever is being protected. It is your material, held for you. It is never a dataset belonging to us. |
| Web logs | The unremarkable kind: originating address, timestamp, page requested. No profiling and no advertising. |
02The uses it is put to
Switching services on, keeping them running, invoicing for them, and answering questions about them. Telling you when a job has failed repeatedly, when something resembles an intrusion, or when a decision about the account is needed from you. Satisfying tax and legal requirements. That is the entire list. Nothing personal gets sold from here. Material held here on your behalf is not mined, not sampled, not traded, and never used to train anything. It is kept in order to be guarded and given back, and for no other purpose at all.
03The processors involved
There are three sorts and no others. Stripe, which handles cards. The security, management, and recovery vendors, together with the storage providers whose infrastructure the lines run on. And a mail provider that carries receipts, alerts, and links for signing in. All act on our instruction, none pursues an aim of its own, and each is bound in writing. Should a subpoena or an order of the court land on our desk, we surrender precisely what the law compels and not a line further, and word of it reaches you from us unless saying so is forbidden.
04Retention periods
Protected material lives for whatever the purchased line publishes: history without limit on directory configuration, seven years on Exchange mail, twenty-eight days of file versions, to take three. Once a subscription closes, the vendor concerned erases that material on its own deprovisioning timetable. Account and invoice records survive for whatever span tax and accounting practice demands. Detection, training, and case history outlives the subscription itself, because its value is as proof that the activity took place.
05Rights, yours and your clients'
Statute in California, and in a widening list of other places, lets a person ask to see, correct, move, or delete a company's holdings about them. Make the request from the address this account uses and whichever right applies gets met.
Notices and opt-out handling owed to the people your firm serves are your duty, not ours. Where their information sits with us as your provider, we help you answer rather than answering in your place. Neither closing an account nor destroying the protected copies inside it can be reversed, so we confirm first, every time.
06Where to write
Fortify 24x7 · support@moneyguardsolutions.com