Solutions
For
Replacing a Pentest
For
Consultants & Partners
For
Lean AppSec Teams
Pricing
FAQ
About
Blog
Product Tour
Get a Demo
Get a Demo

Privacy Policy

Last Updated: August 3, 2026

PLEASE READ THIS PRIVACY POLICY CAREFULLY. BY ACCESSING OR USING THE PLATFORM, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO BE BOUND BY THIS PRIVACY POLICY.

STARIS AI, INC. (“STARIS,” “WE,” “OUR,” OR “US”) IS COMMITTED TO PROTECTING YOUR PRIVACY. THIS PRIVACY POLICY EXPLAINS HOW WE COLLECT, USE, DISCLOSE, AND SAFEGUARD YOUR PERSONAL INFORMATION WHEN YOU INTERACT WITH: (I) OUR MARKETING WEBSITE AT HTTPS://WWW.STARIS.TECH/ (THE “MARKETING SITE”); (II) THE STARIS CONSOLE AVAILABLE AT STARIS.AI AND ASSOCIATED SUB-DOMAINS (THE “CONSOLE”); AND (III) OUR ACCOUNT SIGNUP, USER PROFILE, AND PAYMENT PAGES (COLLECTIVELY WITH THE MARKETING SITE AND THE CONSOLE, THE “PLATFORM,” AS DEFINED IN OUR TERMS OF SERVICE). IF YOU DO NOT AGREE WITH THE TERMS OF THIS PRIVACY POLICY, PLEASE DO NOT ACCESS OR USE THE PLATFORM.

1. What Information We Collect

We may collect information about you in a variety of ways when you use the Platform, including:

Account and Registration Data. When you register for an account, sign up for the Platform, or contact us, we collect personally identifiable information such as your name, email address, phone number, company name, and billing information (including payment card details processed through Stripe, Inc., our third-party payment processor).

Automatically Collected Data. Our servers automatically collect certain information when you access the Platform, such as your IP address, browser type, operating system, access times, referring URLs, and pages viewed. When you use the Console, we also collect usage data such as performance metrics, activity logs, and interaction patterns that do not contain or derive from your Customer Data. We may use such usage data to monitor system performance, improve product functionality, and generate aggregated, de-identified insights in accordance with Section 6.5 of our Terms of Service.

Cookies and Tracking Technologies. We use cookies, web beacons, tracking pixels, and similar technologies to collect information about your interactions with the Platform. You can disable cookies through your browser settings, though doing so may affect your ability to use certain features. See Section 6 (Cookies) for more information.

Third-Party Data. We may receive information about you from third-party sources, such as public databases, social media platforms, and marketing partners when you engage with us through those platforms.

Customer Data. When you use the Console, you may upload information, code, documentation, credentials, and other materials for processing by the Staris platform. This information constitutes “Customer Data” as defined in our Terms of Service. We collect and process Customer Data solely to provide the Platform to you. See Section 2.2 below regarding how we use Customer Data.

2. How We Use Your Information

2.1 General Use of Personal Information. We use the information we collect for the following purposes:

  • To provide, operate, maintain, and improve the Platform, including processing transactions, managing your account, and enabling Console functionality such as file uploads, configuration, processing runs, report generation, and download of outputs.
  • To secure and protect users and the Platform, including investigating and preventing security incidents, detecting and preventing fraudulent or unauthorized activity, and verifying user accounts and code submissions.
  • To communicate with you regarding your account, transactions, security notices, updates to the Platform or these policies, and to respond to your inquiries.
  • To personalize your experience on the Platform and to remember your preferences.
  • To send you promotional communications, if you have opted in to receive them. You may opt out at any time by following the unsubscribe instructions in any such communication.
  • To comply with applicable legal obligations, resolve disputes, and enforce our agreements.

2.2 Use of Customer Data. We process Customer Data (as defined in our Terms of Service) solely to provide the Platform. Consistent with Section 6 of our Terms of Service, Staris will not use your Customer Data or any derivative, embedding, output, or abstraction thereof to train machine learning models, whether operated by Staris or any third party. Customer Data is treated as your Confidential Information in accordance with Section 8 of our Terms of Service. We do not share Customer Data with third parties except as set forth in Section 3 (How We Share Your Information).

3. How We Share Your Information

We do not sell your personal information. We may share your information only in the following circumstances:

Service Providers. We may share your information with trusted third-party vendors who perform services on our behalf, such as cloud hosting providers, payment processors, analytics providers, and customer support platforms. These service providers are contractually obligated to use your information only as strictly necessary to provide services to us and are required to maintain appropriate confidentiality.

Legal Compliance and Protection. We may disclose your information if required by law, court order, or legal process, or if we reasonably believe disclosure is necessary to protect our rights, your safety, or the safety of others, or to investigate and prevent fraud or security incidents.

Business Transfers. If Staris undergoes a merger, acquisition, reorganization, or sale of all or a portion of its assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

Publicity and Marketing Use. Subject to Section 7.4 of our Terms of Service, Staris may use your company name, logo, and trademarks to identify you as a Staris customer in customer lists, marketing materials, and press releases. Staris relies on its legitimate interest in promoting the Platform as the lawful basis for this use, balanced against the limited nature of the information disclosed (business identity only, not individual personal data). You may opt out of such use at any time by providing written notice to legal@staris.tech, and Staris will remove such references within a commercially reasonable period. Staris will not publish detailed case studies or quotes attributable to you without your prior written consent.

No Sale of Personal Information. We will never sell your personal information to third parties.

4. Authorization and Ownership of Customer Data

Your submission of Customer Data to the Console is subject to the authorization, ownership, and prohibited-submission requirements set forth in Sections 5.4, 5.5, and 5.7 of our Terms of Service. By uploading any Customer Data, you represent and warrant that you own or have all necessary rights to submit such content and that your submission does not violate any applicable law, regulation, or third-party right. Staris reserves the right to suspend or terminate access to the Console if it has a reasonable basis to believe that a user is submitting unauthorized content.

5. Retention and Data Protection

5.1 Retention of Personal Information. We retain personal information for as long as necessary to provide the Platform and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law. When we no longer have a legitimate business need to retain your personal information, we will delete or anonymize it.

5.2 Retention and Deletion of Customer Data. Customer Data uploaded to the Console is retained for thirty (30) days following the earlier of: (i) completion of a Security Review Cycle; or (ii) termination or expiration of your account. Upon expiration of that retention period, Staris will permanently delete your Customer Data, including all copies, derived outputs, system logs containing Customer Data, and backup copies, from Staris’s systems and those of any subprocessors. Staris will provide you with written confirmation of deletion within ten (10) business days of the deletion date. You may request earlier deletion by contacting us at legal@staris.tech; we will complete deletion within ten (10) business days of your request and provide written confirmation.

5.3 Data Security. We use a variety of administrative, technical, and physical security measures to protect your personal information from unauthorized access, use, or disclosure. We secure information on computer servers in a controlled, secure environment. However, no security system is impenetrable, and we cannot guarantee the absolute security of your information. You are responsible for maintaining the confidentiality of any account credentials.

6. Cookies

6.1 We Use Cookies. We use cookies and similar tracking technologies on the Marketing Site and the Console to collect information about how you interact with the Platform.

6.2 Cookies Explained. A cookie is a small data file placed on your device when you visit a website. Cookies allow the site to recognize your browser and remember information about your visit.

6.3 Why We Use Cookies. We use both first-party and third-party cookies to: (i) enable essential site functionality; (ii) remember your preferences; (iii) analyze usage patterns and improve the Platform; and (iv) support analytics and advertising on the Marketing Site.

6.4 Your Cookie Choices. You may accept or reject cookies through your browser settings. If you choose to reject cookies, some features of the Platform may not function correctly. You may also opt out of interest-based advertising through the Digital Advertising Alliance at http://www.aboutads.info/choices/ or, if located in the EEA/UK, at http://www.youronlinechoices.eu/.

7. International Data Transfers

Staris is based in the United States. If you access the Platform from the European Economic Area (EEA), the United Kingdom (UK), or other regions with data protection laws that differ from U.S. law, please be aware that your information may be transferred to, stored, and processed in the United States. When we transfer personal data of individuals in the EEA, Switzerland, or the UK to third parties, we use appropriate legal mechanisms to safeguard the transfer, including the European Commission-approved Standard Contractual Clauses. If you require a Data Processing Agreement (DPA), please contact us at legal@staris.tech.

8. Your Privacy Rights

Depending on your location, you may have the following rights with respect to your personal information. To exercise any of these rights, please contact us at legal@staris.tech. We may verify your identity before processing your request and will respond within the timeframe required by applicable law.

  • You may request access to the personal information we hold about you.
  • You may request correction of inaccurate or incomplete personal information.
  • You may request deletion of your personal information, subject to certain legal exceptions.
  • You may opt out of receiving promotional communications at any time by clicking the “unsubscribe” link in those emails or by contacting us.
  • You may object to our processing of your personal information, ask us to restrict processing, or request portability of your personal information.
  • Where we process your information on the basis of consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
  • You have the right to lodge a complaint with your local data protection authority.

9. EEA and UK Users

If you are located in the EEA or the UK, the following additional information applies to you:

Data Controller and Processor Roles. Staris acts as a data controller with respect to personal information collected for account registration, communications, analytics, and marketing purposes. Where you upload Customer Data to the Console for processing, Staris acts as a data processor on your behalf, processing Customer Data solely in accordance with your instructions and our Terms of Service.

Legal Bases for Processing. The legal bases on which we rely to process your personal information are: (i) performance of a contract — to provide, operate, and maintain your account and the Platform, including processing Customer Data through the Console (Sections 2.1 and 2.2); (ii) legitimate interests — to secure and protect users and the Platform, analyze usage patterns, improve the Platform, and use your company name, logo, and trademarks to identify you as a Staris customer in marketing materials (Sections 2.1, 3, and 6), where those interests are not overridden by your data protection rights; (iii) compliance with legal obligations — to comply with applicable laws, court orders, and regulatory requirements; and (iv) consent — to send you promotional communications, where you have opted in (Section 2.1). You may withdraw consent at any time as described in Section 8.

Subprocessors. Staris engages certain third-party subprocessors to assist in providing the Platform. A current list of subprocessors is available upon request by contacting legal@staris.tech.

Data Processing Agreement. If you require a Data Processing Agreement (DPA) for your use of the Platform, please contact us at legal@staris.tech.

Representative. If you reside in the EEA or the UK and have questions about your rights or our processing activities, you may contact our designated representative: Daniel Herrera, Chief Information Security Officer, at: daniel@staris.tech. You may also reach us at legal@staris.tech.

10. California Privacy Rights

As Staris does not currently meet the thresholds established by the California Consumer Privacy Act (“CCPA”), the CCPA does not apply to your use of the Platform at this time. In the event that Staris meets the applicable CCPA thresholds in the future, this section will be updated to reflect any additional rights available to California residents.

11. Children’s Privacy

The Platform is not intended for or directed to individuals under the age of 18, and you must be at least eighteen (18) years of age to register for an account or use the Platform, consistent with Section 3.1 of our Terms of Service. We do not knowingly collect personal information from children under 18. If you are located in a jurisdiction that sets a different minimum age for data collection (such as age 13 under the U.S. Children’s Online Privacy Protection Act), we do not knowingly collect personal information from children under the applicable minimum age. If you believe we have inadvertently collected personal information from a child, please contact us at legal@staris.tech and we will promptly delete such information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide at least thirty (30) days’ advance notice by posting the revised policy on the Platform, updating the “Last Updated” date above, and sending a notification via email or in-Console alert to registered users. Your continued use of the Platform after the effective date of any update constitutes your acceptance of the updated Privacy Policy.

13. Dispute Resolution

Any dispute arising out of or relating to this Privacy Policy or your privacy rights is subject to the dispute resolution provisions set forth in Section 13 of our Terms of Service, including the binding arbitration and class action waiver provisions therein. Please review those provisions carefully.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at: Staris AI, Inc. Email: legal@staris.tech

Stop scrambling.
Start securing.
Get a Demo
Get a Demo
Newsletter Signup
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Solutions
Replacing a Pentest
Cadence
The math
The Receipt
Lean AppSec Teams
Context
The math
Your stack
Consultants & Partners
Security
Receipts
Cost structure
Company
About usCareersContactTrust CenterProduct Tour
Blog
Privacy PolicyAccessibility StatementTerms of Service© 2026 Staris AI, Inc. All rights reserved.
Linkedin LogoX LogoFacebook Logo