Privacy Policy

TRaViS is a product of Seron Security, Inc. ("TRaViS," "we," "us"). This policy explains what personal data we collect, why, and the choices you have. We collect as little as we can to run the service — and we never sell your data.

1. Who we are

Seron Security, Inc., 2 Smokey Road, Bow, NH 03304, USA, is the controller of personal data described here. For privacy questions, contact privacy@travisasm.com.

2. Information we collect

• Account & contact data — name, work email, company, and details you submit through our forms or during onboarding.
• Scan inputs — the domains and assets you ask us to assess. We do not retain a domain you submit to the free exposure report without your consent.
• Service data — findings, reports, and configuration generated while you use TRaViS.
• Usage & device data — limited technical logs (e.g., IP address, browser) needed to operate and secure the service.
• Cookies — only those necessary to run the site and any analytics you've consented to (see §9).

3. How we use information

• To provide, secure, and improve the TRaViS service and deliver your reports.
• To respond to enquiries and provide human support and incident response.
• To send service and, where permitted, relevant product communications (you can opt out).
• To meet legal, regulatory, and security obligations.

4. Legal bases (EEA/UK)

Where GDPR/UK GDPR applies, we rely on: performance of a contract (to provide the service); legitimate interests (to secure and improve it, and for B2B outreach); consent (for optional cookies/marketing); and legal obligation. You may withdraw consent at any time.

5. How we share information

We do not sell personal data. We share it only with: service providers/sub-processors who help us run TRaViS under contract; professional advisers; and authorities where legally required. A current list of sub-processors is available on request.

6. International transfers

We may process data in the United States and other countries. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.

7. Retention

We keep personal data only as long as needed to provide the service, meet legal and security obligations, and resolve disputes — then delete or anonymise it. You can request deletion of your data at any time.

8. Security

We protect data with encryption in transit and at rest, multi-factor authentication, and least-privilege access. See our Trust & Security page for details and our responsible-disclosure policy.

9. Cookies

We use strictly necessary cookies to operate the site. Any analytics or non-essential cookies are used only with your consent, and we favour privacy-respecting, self-hosted tooling.

10. Your rights

Depending on where you live, you may have rights to access, correct, delete, port, or object to the processing of your personal data, and to lodge a complaint with a supervisory authority. To exercise any right, email privacy@travisasm.com.

11. Children

TRaViS is a business product and is not directed to children. We do not knowingly collect data from anyone under 16.

12. Changes

We'll update this policy as the service evolves and revise the "last updated" date above. Material changes will be communicated where appropriate.

13. Contact

Questions or requests: privacy@travisasm.com or write to Seron Security, Inc., 2 Smokey Road, Bow, NH 03304, USA.