Privacy Policy

Effective Date: January 1, 2026

Application Of This Privacy Policy

This policy governs SecureAuth's products including Authenticate, Arculix Mobile, Smart Log On, cloud platforms, and support services, along with websites at secureauth.com and related interactions. The policy works alongside the Data Privacy Framework Statement.

The policy does not cover third-party applications integrating with SecureAuth platforms or separate agreements governing service delivery and customer data processing.

What Information We Collect

Customer Data

Individuals using SecureAuth Services submit customer data when utilizing the platform.

Other Information

Other information we collect includes:

Account Information

Email addresses, phone numbers, passwords, domains, billing details, credit card information, and banking details.

Usage Information

Services metadata about how authorized users work
Log data including IP addresses, browser type, access times, and cookie data
Device information covering device type, operating system, identifiers, and crash data
Location information from business addresses, IP addresses, and device locations

Cookie Information

First and third-party cookies and tracking technologies.

Third-Party Services

Information shared by integrated software providers.

Third-Party Data

Aggregate data from partners about organizations, industries, and marketing performance.

Additional Information

Data from focus groups, contests, job applications, support requests, and social media interactions.

No statutory obligation exists to provide information, though certain details like account setup information are necessary for service delivery.

How We Use Collected Information

Customer data usage follows customer instructions, the Customer Agreement, and applicable law. SecureAuth functions as a processor; customers are controllers.

Other information supports legitimate business interests:

Providing, updating, maintaining, and protecting services and websites
Complying with applicable law and legal processes
Responding to requests, comments, and questions
Developing search, learning, and productivity tools
Sending administrative and service emails (non-optional)
Sending marketing communications (optional)
Billing, account management, and administrative matters
Investigating and preventing security issues and abuse

Aggregated or de-identified information may be used for any business purpose.

Data Retention

SecureAuth retains customer data per customer instructions and applicable law. Other information is retained as necessary for stated purposes, including after account deactivation for legitimate business interests, audits, legal compliance, dispute resolution, and agreement enforcement.

Who We Share It With

Information is shared with business partners acting on SecureAuth's behalf. SecureAuth does not sell information to third parties. Text message contact information is not shared with third parties for independent messaging purposes.

How We Offer Customers A Choice

Customers may opt out of marketing contact via email, postal mail, fax, or phone by contacting customer service. Functional service communications cannot be opted out of.

Security Of Your Information

SecureAuth follows industry standards and implements security technology to protect customer data, restricting access to authorized personnel only.

Children And Privacy

SecureAuth does not knowingly target, solicit, or send personal information requests to children under 13.

Third-Party Sites

Website links to third-party sites do not share personal information. SecureAuth is not responsible for third-party privacy practices.

Use Of Cookies

Cookie Tracking Technology

SecureAuth uses cookies and tracking technologies to remember preferences, improve experience, and provide relevant information. Resources for learning more:

How We Use Cookies

Information collected includes:

User-provided information (name, email, credentials)
Automated information (browser type, operating system, pages viewed, links clicked, IP address)

Uses include providing product/service information, improving user experience, and producing activity-related reports.

Specific cookies:

Google AdWords for relevant advertising
Third-party cookies from external websites
Web beacons, images, scripts for visit and behavior tracking
IP address and browser information for non-personal tracking

How To Delete And Block Cookies

Users can delete and block cookies through browser settings and preferences.

Withdrawing Consent To Collect Cookies

Delete cookies in browser settings and adjust preferences to block future cookies. Cookies do not provide computer access. Third-party site cookie use is beyond SecureAuth's control.

Third Party Cookies

Required Site Features:

Marketo (Marketing Automation Platform): Manages registrations, collects and stores consent, sends consent-based emails, tracks interactions. Privacy notice

Functional Site Features:

Google AdWords: Opt-out at Google Ads Settings and NAI Opt-Out
Google Analytics: Collects visitor behavior data to improve website content and performance
Google Tag Manager: Stores and manages external and third-party tags
Engagio: Collects aggregated information about website usage and marketing campaign effectiveness. Privacy policy
CrazyEgg: Collects website user behavior data for content and performance improvement. Privacy policy
Wistia: Stores website videos and collects anonymous viewing information. Privacy policy

Advertising and Remarketing Services:

6sense: Privacy policy
Bing Ads: Privacy statement

Partners

SecureAuth may receive updated personal information from third-party partners to correct records, update search results, and support advertising and sales efforts, verifying that third parties obtained information legally and consistently with SecureAuth's privacy principles.

Social Media

SecureAuth uses social media features on websites. Each platform has its own privacy policy:

International Data Transfers

SecureAuth may transfer personal data to countries outside users' residence, deploying European Union Model Clauses (Standard Contractual Clauses) to meet adequacy and security requirements for EU-based customers. A standard data processing addendum incorporating Model Clauses is available upon request.

Your Rights

Individuals in certain countries, including the European Economic Area, have statutory rights regarding personal data. Subject to legal exemptions, you may request access, updates, deletion, or correction of information.

Processing relying on legitimate interests (described above) is permitted under GDPR. You may object to personal data processing for direct marketing purposes at any time.

Changes To This Privacy Policy

SecureAuth may amend this policy as laws, regulations, and industry standards evolve or as business practices change. Substantial changes will be posted on the company's websites.

Questions Or Suggestions

Contact SecureAuth regarding privacy policy questions, practices, or statutory rights exercises:

Email: [email protected]

Mailing Address:
SecureAuth Corporation
49 Discovery Suite 220
Irvine, CA 92618