Website Privacy Policy
Last Updated: 2026-05-12
This Privacy Policy explains how Ecliptica Labs AB, a company incorporated under the laws of Sweden with its principal place of business at Box 6351, 102 35 Stockholm, Sweden, corporate registration number 5591448443 ("Ecliptica Labs", "we", "us", or "our"), collects, uses, and safeguards personal data in connection with the public Threat Landscape websites, landing pages, contact flows, affiliate attribution flows, and self-serve checkout journeys made available through threatlandscape.io, threatlandscape.ai, or related domains (collectively, the "Website Services").
This Website Privacy Policy does not govern logged-in use of Threat Landscape Platform, Threat Landscape Copilot, or Threat Landscape API inside the product environment. Logged-in product use is addressed in the Threat Landscape Product Privacy Policy. Where personal data is processed on behalf of a customer organization under an applicable Data Processing Agreement (DPA), the DPA and governing contract documents control to the extent of any conflict.
By using the Website Services, submitting a form, or starting a self-serve checkout flow, you acknowledge that you have read and understood this Website Privacy Policy.
1. Data Controller
For purposes of the EU General Data Protection Regulation ("GDPR") and applicable Swedish data protection laws, Ecliptica Labs AB acts as the data controller with respect to the personal data described in this Website Privacy Policy.
2. Personal Data We Collect
2.1 Information You Provide Directly
We may collect personal data you provide through the Website Services, such as:
- name;
- email address;
- company name;
- business contact details;
- inquiry or demo-request content; and
- self-serve checkout and account-setup details submitted through our merchant of record or related subscription flows.
2.2 Website, Checkout, and Referral Data
We or our service providers may collect limited technical and commercial data in connection with the Website Services, such as:
- IP address;
- browser and device information;
- referral source and campaign information;
- affiliate attribution identifiers;
- checkout session and order status information; and
- security and anti-abuse logs.
We do not collect payment card details directly. Payment processing is handled by LemonSqueezy, our merchant of record and payment processor.
3. Purposes of Processing
We process personal data collected through the Website Services for the following purposes:
- operating and securing the Website Services;
- responding to inquiries, demo requests, and partnership requests;
- managing self-serve subscriptions and related account-administration steps;
- supporting affiliate attribution and commission tracking;
- preventing fraud, abuse, and unauthorized activity; and
- complying with legal, tax, accounting, and regulatory obligations.
4. Legal Bases for Processing
Our processing of personal data under this Website Privacy Policy is based on one or more of the following legal grounds:
- legitimate interests under Art. 6(1)(f) GDPR, including operation, security, fraud prevention, affiliate attribution, and business communications;
- contractual necessity under Art. 6(1)(b) GDPR, where processing is required to respond to your request, create a self-serve subscription, or administer an order;
- legal obligations under Art. 6(1)(c) GDPR, including tax, accounting, and compliance obligations; and
- consent under Art. 6(1)(a) GDPR, where required by applicable law for particular cookies or similar technologies.
5. Service Providers and Recipients
We use service providers to operate the Website Services, including:
- Cloudflare for website security, proxying, and network protection; and
- LemonSqueezy for self-serve checkout, merchant of record services, payment processing, and affiliate attribution support.
Those providers may process personal data on our behalf or, depending on the specific checkout or payment flow, under their own legal terms and privacy notices.
6. Data Transfers
Where personal data is transferred outside the European Economic Area ("EEA"), we rely on appropriate safeguards, such as Standard Contractual Clauses (SCCs) adopted by the European Commission, where applicable.
7. Retention
We retain website inquiry data, subscription-initiation data, and related administrative records for as long as reasonably necessary to fulfil the purpose for which the data was collected, resolve disputes, maintain security records, and comply with legal obligations.
Checkout and payment records are primarily processed by LemonSqueezy in its merchant-of-record role. We may retain limited order, account-administration, or support records where needed for operational, legal, or compliance purposes.
8. Your Rights
Under GDPR, you may have the right to:
- access your personal data;
- correct inaccurate or incomplete data;
- request deletion of your personal data;
- restrict processing;
- object to processing;
- request data portability where applicable; and
- lodge a complaint with your local supervisory authority, including Integritetsskyddsmyndigheten (IMY) in Sweden, where applicable.
Requests to exercise your rights may be submitted using the contact details in Section 13.
9. Security
We implement reasonable technical and organizational measures to protect personal data collected through the Website Services. However, no method of transmission over the internet or electronic storage is completely secure.
10. Children's Data
The Website Services are intended for business users and organizations. We do not knowingly collect personal data from individuals under the age of 18.
11. Changes to This Policy
We may update this Website Privacy Policy from time to time. The updated version will be posted on our website with a revised "Last Updated" date.
12. Governing Law
This Website Privacy Policy and any disputes arising hereunder shall be governed by and construed in accordance with the laws of Sweden.
13. Contact Information
For questions or concerns regarding this Website Privacy Policy, please contact us at:
Ecliptica Labs AB
Box 6351
102 35 Stockholm, Sweden