Legal
Privacy Policy
Last updated: September 24, 2026
The short version
- We never collect or store the contents of your directory - assessments are read-only and the data we scan stays in your environment.
- Scan credentials are used in memory only and are discarded immediately after each assessment.
- We collect account and usage data, like your name, email, and scan history metadata, to operate the Service - not to sell to third parties.
01Information We Collect
| Category | Examples |
|---|---|
| Account information | Name, work email, company, job position, country, phone number, password (hashed). |
| Usage data | Log-in activity, pages viewed, features used, scan history metadata (e.g. date, duration, domain name you assign). |
| Device data | Browser type, IP address, and general location inferred from IP for security and analytics. |
| Communications | Messages you send us, such as support requests or waitlist sign-ups. |
We do not collect payment card details unless you subscribe to a paid plan, in which case payment is processed by a third-party payment processor under its own privacy terms.
02How We Handle Scanned Environment Data
This is the part most customers care about most, so we're explicit about it:
- The Service connects to your environment using a read-only, least-privilege account that you create and control.
- Scan credentials are held in memory only for the duration of the assessment and are never written to disk or stored in our systems.
- Findings and report content generated from a scan (e.g. "155 accounts with Password Never Expires") are stored so you can view your report and history - the underlying raw directory data itself is not retained beyond what is needed to render your report.
- We do not use the contents of your environment to train any models or share it with any other customer.
03How We Use Your Information
We use the information described above to:
- Create and maintain your account and deliver the Service;
- Generate, store, and let you retrieve your assessment reports;
- Send you service-related communications (e.g. scan complete notifications, security alerts);
- Send product updates and marketing communications, which you can opt out of at any time;
- Monitor, secure, and improve the Service, including diagnosing technical issues;
- Comply with legal obligations.
05Data Retention
We retain account information for as long as your account is active. Report and scan-history metadata is retained so you can access your assessment history, and can be deleted on request. When you close your account, we delete or anonymize your personal information within a reasonable period, except where we are required to retain it for legal or legitimate business purposes.
06Security
We use industry-standard technical and organizational measures to protect your information, including encryption in transit, access controls, and regular security review of the Service. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
07Your Rights & Choices
Depending on your location, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at wecare@onelook365.net. We will respond within the timeframe required by applicable law.
09Children's Privacy
The Service is intended for business use by adults and is not directed to individuals under 18. We do not knowingly collect personal information from children.
10Changes to this Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service before they take effect.
11Contact Us
Questions about this Privacy Policy or your data can be sent to wecare@onelook365.net.