Privacy Policy

Last updated July 8, 2026 · Version 2026-07-08-draft

Plain-language summary (not the binding text)

This policy describes what FAUCET Technologies LLC collects when you use FAUCET, why, and the choices you have.

We collect account data, usage data, and (for paid plans) billing data processed by Stripe. We never store your card numbers. We use strictly necessary cookies to run the product, and Cloudflare Web Analytics, which doesn't use cookies, to understand site traffic. We use a short list of other service providers (subprocessors) to run the service.

This summary is a convenience and is not binding; the sections below are the operative policy.

1. Who we are

FAUCET is operated by FAUCET Technologies LLC, 1717 N Street Northwest, STE 1, Washington, DC 20036. We are the controller of the personal data described here. Contact:.

2. What we collect

  • Account data: your email address, display name, authentication identifiers (via Firebase Authentication), and your two-factor-authentication enrollment status.
  • Usage data: your watchlists, technology inventories, saved queries, alert rules, and product activity needed to operate those features, plus standard server logs (IP address, timestamps, request metadata) for security and reliability.
  • Site analytics data: aggregate, non-identifying traffic data (page views, visits, referrers, general location, browser/device type, and page performance) collected through Cloudflare Web Analytics. See Section 4 for full detail.
  • Billing data (paid plans): handled by our payment processor, Stripe. Stripe processes your payment details; FAUCET stores subscription status and identifiers but does not store your full card numbers.
  • Communications: messages you send us (support tickets, partnership or contact inquiries) and your email or notification preferences.

3. How we use it

  • To provide and operate the service (enrichment, scoring, search, watchlists, alerting, API/MCP access).
  • To enforce the limits and permissions of your plan, including the free-lookup limit for visitors without an account.
  • To send transactional and account email and the notification categories you have enabled (for example, alert emails and digests).
  • To secure the service, prevent abuse, and meet our legal obligations.
  • To process payments and manage subscriptions (paid plans).
  • To understand traffic and usage through analytics, and to improve FAUCET.

4. Cookies and site analytics

FAUCET uses cookies only where they're required to run the service. We do not use cookies for analytics or advertising.

Strictly necessary cookies. These keep you signed in, enforce the usage limits and feature permissions of your plan (including the 5 free lookups available to visitors without an account), and protect FAUCET against abuse. These are required to use FAUCET.

Site analytics. We use Cloudflare Web Analytics to understand aggregate traffic to FAUCET, such as page views, visits, top pages, and referrers. Cloudflare Web Analytics does not use cookies or local storage and does not identify individual visitors.

Because FAUCET does not use any cookies beyond the strictly necessary ones above, we do not display a cookie consent banner.

5. Email and your choices

Transactional and account emails are part of the service. For alert and digest emails, you control delivery in your notification settings, and every such email includes a one-click unsubscribe link.

6. Subprocessors

We use the following service providers to run FAUCET. Each processes data only as needed to provide their service to us:

  • Google Cloud Platform: hosting, database, and infrastructure.
  • Google Firebase: authentication.
  • Stripe: payment processing (paid plans).
  • Resend: transactional and notification email delivery.
  • Anthropic: AI enrichment and classification of vulnerability data.
  • Cloudflare: content delivery, network security, and privacy-first website analytics (see Section 4).

Some of these providers process data outside your country, including in the United States. Where required, we rely on the transfer mechanisms those providers make available, such as Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

7. Data retention

We keep account and usage data for as long as your account is active and as needed to provide the service. We retain certain records (for example, billing records and security logs) for longer where we have a legal or legitimate business reason. The specific retention periods are being finalized with counsel.

8. Your rights

You can access and update your account information in the app, and you can request access to, correction of, or deletion of your personal data by contacting. We will respond consistent with applicable law. Deleting your account removes your account data, subject to records we must retain.

If you are in the EEA, UK, or Switzerland, you have rights under GDPR including access, correction, deletion, restriction, objection, and data portability, and the right to lodge a complaint with your local data protection authority.

If you are a California resident, you have rights under the CCPA, including the right to know, delete, and correct your personal information. FAUCET does not sell or share (as those terms are defined under the CCPA) your personal information.

9. Security and breach notification

We use technical and organizational measures appropriate to the service to protect personal data (including encryption in transit, access controls, and a two-role database model). No system is perfectly secure.

If a data breach affects your personal data, we will notify affected users and any authorities as required by applicable law and within the timeframes the law requires.

10. Changes to this policy

We may update this policy. When we make material changes, we will update the version shown here and, where appropriate, notify you.

11. Contact

Privacy questions:· FAUCET Technologies LLC, 1717 N Street Northwest, STE 1, Washington, DC 20036.