Privacy Policy
Effective Date: February 3, 2025
Sneaky Intel ("we," "us," or "our") operates a threat intelligence enrichment service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. We are committed to protecting your privacy and being transparent about our data practices.
By using Sneaky Intel, you agree to the collection and use of information in accordance with this policy. If you do not agree with our practices, please do not use our service.
2.1 Account Information
When you create an account, we collect your name, email address, and company or organization name. This information is necessary to provide you with access to our service and to communicate with you about your account.
2.2 Billing Information
We use Stripe to process payments. When you subscribe to our service, Stripe collects and processes your payment information. We do not store your full credit card number, CVV, or other sensitive payment details on our servers. Stripe's handling of your payment information is governed by their Privacy Policy.
2.3 Lookup Data
When you submit indicators of compromise (IOCs) such as URLs, domains, IP addresses, or file hashes for analysis, we store these lookups along with the enrichment results. Lookup history is retained based on your subscription tier, up to a maximum of 90 days. You can delete your lookup history at any time through your account settings or by contacting us.
2.4 Technical Data
We automatically collect certain technical information when you access our service, including IP address, browser type, and access timestamps. We do not use third-party analytics or tracking services.
We use the information we collect to:
- Provide, maintain, and improve our threat intelligence enrichment service
- Process your transactions and manage your subscription
- Communicate with you about your account, including service announcements and security alerts
- Respond to your inquiries and support requests
- Protect against fraud, abuse, and unauthorized access
- Comply with legal obligations
We do not sell your personal information. We do not send marketing emails.
4.1 Opt-In Only
AI analysis is never enabled by default. You must explicitly enable AI analysis for each lookup by checking the "Enable AI Analysis" option. When enabled, our AI analyzes your lookup results to provide additional context, threat assessments, and actionable insights.
4.2 How AI Processing Works
When you opt into AI analysis:
- You submit a lookup and we perform the standard scan/enrichment process.
- The enrichment results are sent to Replicate (our AI infrastructure provider) for analysis. This data is processed in memory.
- We receive the AI analysis summary and store it with your lookup results.
- Replicate automatically deletes all inputs and outputs within 1 hour. The original data never persists on their infrastructure.
4.3 AI Model Information
We use Meta's Llama models for analysis. This choice was deliberate for transparency and privacy:
- Llama is an open-source model with publicly available weights, allowing full transparency about how it operates.
- Llama was pretrained exclusively on publicly available internet data.
- Meta explicitly states that Llama training datasets exclude Meta user data.
- No personal information was used in model training.
4.4 No Training on Your Data
Replicate does not use customer data to train or improve models. Your inputs never become training data. Your data is only used to generate the analysis response—nothing more. For API predictions (which we use), all inputs and outputs are automatically deleted within 1 hour. Replicate retains only minimal prediction metadata for billing purposes.
| Data Type | Retention Period |
|---|---|
| Account information | Until account deletion |
| Billing records | As required by law (typically 7 years) |
| Lookup history | Per subscription tier, maximum 90 days |
| AI analysis inputs (at Replicate) | Automatically deleted within 1 hour |
You may request deletion of your account and associated data at any time. See Section 8 for details.
We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:
Service Providers
We share data with third-party service providers who perform services on our behalf, including Stripe (payment processing) and Replicate (AI analysis). These providers are contractually obligated to protect your information and use it only for the purposes we specify.
Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
Business Transfers
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
With Your Consent
We may share your information for other purposes with your explicit consent.
We implement appropriate technical and organizational measures to protect your information, including:
- Encryption in transit (TLS) and at rest
- Access controls and authentication requirements
- Regular security assessments
- Isolated infrastructure per customer to prevent data commingling
While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
You have the following rights regarding your personal information:
Access and Portability
You can access your account information and lookup history through your account dashboard. You may request a copy of your data in a portable format.
Correction
You can update your account information at any time through your account settings.
Deletion
You can delete your lookup history through the user interface. You can also request complete account deletion by contacting us at support@sneakyllc.com. Upon account deletion, we will remove your personal information within 30 days, except where retention is required by law.
Opt-Out of AI Analysis
AI analysis is opt-in only. Simply do not enable the "Enable AI Analysis" option when performing lookups.
To exercise any of these rights, contact us at support@sneakyllc.com.
Sneaky Intel is based in the United States. If you access our service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located.
By using our service, you consent to the transfer of your information to the United States. We take steps to ensure that your data receives an adequate level of protection in the jurisdictions in which we process it.
Our service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us and we will take steps to delete such information.
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. We encourage you to review this Privacy Policy periodically.
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:
Sneaky Intel
Email: support@sneakyllc.com
Last updated: February 3, 2025