1. Scope and role
This Privacy Policy applies to information we process in connection with GotLeaked’s website, account enrollment, authorized exposure monitoring, endpoint-monitoring options, support, billing, and optional SMS security-alert program. GotLeaked is intended for dental offices and other authorized business users in the United States.
2. Information we process
Depending on the service selected, we may process business contact details, office information, authorized email addresses, usernames, verified domains, device-enrollment details, doctor-owner verification information, support communications, billing metadata, and security-event metadata. We may also collect standard website and device information, such as browser type, IP address, pages viewed, referring pages, and cookie or session information.
3. Information we do not request
GotLeaked is not designed to receive patient records, protected health information, passwords, authentication codes, session cookies, API keys, tokens, or raw credential payloads. Do not submit that information through our website, forms, support channels, or the Service. We do not display passwords, session cookies, tokens, or raw credential payloads in findings or alerts.
4. How we use information
We use information to verify authorization, provide and administer monitoring, send account and security notices, support enrolled offices, prevent misuse, maintain and improve Service security, process billing, comply with law, and protect our rights. We do not sell personal information or use raw credential content for advertising.
5. Security findings and alerts
We present normalized, action-oriented security findings. If a username is shown in a relevant authorized finding, it is masked. We direct authorized users to the private GotLeaked experience rather than including sensitive finding details in email or SMS. Monitoring findings may be delayed, incomplete, or unavailable; see our Terms & Conditions.
6. Billing information
Payments are processed by our payment processor. GotLeaked does not store full payment-card numbers or card security codes. We may receive billing metadata such as customer and subscription identifiers, payment status, invoice information, and limited payment-method details needed to administer billing, refunds, taxes, disputes, and account access.
7. SMS security-alert information
If you separately opt in, we process your mobile number, opt-in status, consent timestamp and source, opt-out status, message-delivery metadata, and related support records solely to operate, secure, document, and support the GotLeaked SMS security-alert program.
GotLeaked SMS messages include automated security and account alerts. Message frequency varies. Message and data rates may apply. Reply STOP to unsubscribe or HELP for help. For assistance, contact hello@gotleaked.dental. Consent to receive SMS messages is optional and is not a condition of purchase.
Mobile information and SMS opt-in data and consent are not sold, rented, or shared with third parties or affiliates for marketing or promotional purposes. We may use service providers acting solely on our behalf to deliver and operate the program under contractual safeguards; they may not use this information for their own marketing or promotional purposes.
8. Service providers and disclosures
We may use vetted providers for hosting, messaging, payments, endpoint monitoring, analytics, and support. They may process information only as needed to perform services for us and under applicable contractual safeguards. We may also disclose information when required by law, to protect the security of the Service, or in connection with a corporate transaction, subject to applicable law.
9. Retention and security
We retain information only as reasonably necessary to provide the Service, maintain security and business records, resolve disputes, and meet legal obligations. We use administrative, technical, and organizational measures designed to protect information, but no service can guarantee absolute security. You may request deletion or export of account information by contacting us, subject to legal, security, and contractual requirements.
10. Your choices and rights
You may unsubscribe from marketing emails using the option provided. Service and security messages may continue while an account or monitoring enrollment remains active. Depending on applicable law, you may have rights to request access to, correction of, or deletion of personal information. We will respond to verifiable requests as required by law.
11. Cookies and website analytics
Our public website may use cookies, analytics, and similar technologies to provide functionality, understand usage, and improve the experience. You can manage cookies through your browser settings; disabling certain cookies may affect site functionality.
12. Changes and contact
We may update this Policy from time to time. We will post the revised version with an updated effective date and provide additional notice where required by law. For privacy requests or questions, contact hello@gotleaked.dental.