Privacy policy

01 Information we collect

Account information you give us: name, email, phone, organisation and role. Authentication data, including multi-factor secrets stored only as required to sign you in. Billing details processed by the payment provider, not kept as raw card numbers on the investigative platform.

Usage, device and security logs: feature use, IP address, browser, and security events. Session cookies keep you signed in. Analytics cookies are limited to operating the service.

Investigation material is processed under the customer’s instruction and lawful basis. HornetStrike is not a public search engine and does not intercept the content of private communications.

02 How we use it

To provide the platform, authenticate operators, bill for usage, secure the service, and meet legal duties. Purpose limitation applies to investigative queries inside the product: a purpose and basis are captured before a lookup runs.

03 Security

AES-256 in transit and at rest as deployed. Access is role-based and attributed. ISO 27001 is the management system. No control removes the customer’s duty to permission their own operators.

04 Sharing

We share information with infrastructure and payment providers under contract; when the law, a court or a valid agency process requires it; in a corporate transfer with the same protections; with your consent; or to stop fraud and respond to an incident. We do not sell personal information.

05 Retention

Account data stays for the life of the account plus the legal retention period. Investigation data follows the case and the statute. Security logs are typically kept 12–24 months. Backups may persist up to 90 days after deletion.

06 Your rights

Depending on jurisdiction you may request access, correction, deletion, portability, restriction or objection, and you may withdraw consent where processing rested on it. Some records must be kept for law enforcement, regulation or security. Write to the privacy officer.

07 International transfers

HornetStrike is based in South Africa. Information may be processed in South Africa or in another country where a commissioned deployment or a provider operates, with contractual safeguards or an adequacy decision where required.

08 Children, cookies, changes

The service is not for anyone under 18. Cookies maintain the session, preferences and security. You can block them in the browser; the signed-in product will not fully work. We will mark material changes with a new date on this page.

09 Contact

Privacy officer · privacy@hornetstrike.com
Support · support@hornetstrike.com
Legal · legal@hornetstrike.com

165 West Street, Sandton, Johannesburg, South Africa