01
Information you provide
Hagon may receive business contact information, account details, organization information, authorized scope, and other information you choose to provide when requesting access, creating an account, communicating with support, or using the service.
02
Account and access data
We maintain records needed to authenticate users, associate them with the correct organization, manage commercial access, protect sessions, and preserve authorization history. Commercial access, domain verification, and permission to interact with infrastructure remain separate controls.
03
Security assessment data
When a customer uses Hagon, we may process public infrastructure information, reconnaissance observations, authorized testing results, validation evidence, Findings, remediation history, monitoring state, and related operational records needed to provide the service. Active interaction is limited to infrastructure the customer has explicitly authorized.
04
Evidence minimization
Hagon is designed to preserve enough evidence to explain a security conclusion while avoiding unnecessary collection. Validation retains bounded security facts and provenance rather than arbitrary response bodies, credentials, cookies, or unrelated content when they are not required.
05
Website and inquiry data
The public website does not currently operate a self-service registration or contact form. If you contact Hagon at support@hagontech.com, we use the information you provide to respond, evaluate beta access, and support the customer relationship. Website hosting, DNS, and email providers may retain ordinary technical, security, and delivery logs.
06
Notifications and email
Customers may configure contact information for security and service notifications. Hagon may use that information to deliver Finding, remediation, monitoring, certificate-expiration, and other service-related messages according to the customer's notification preferences.
07
How information is used
We use information to operate and secure Hagon, provide reconnaissance and validation, maintain tenant isolation and authorization records, calculate customer security state, support remediation and monitoring, deliver requested communications, troubleshoot the service, and meet legitimate operational or legal obligations.
08
Service providers
Hagon may rely on infrastructure, hosting, DNS, email, backup, and other service providers to operate the platform. Providers receive only the information reasonably necessary for their role and remain separate from Hagon's security-scoring authority.
09
AI use
Customer-specific security data is not intended for training public or general-purpose AI models. If Hagon later uses an external AI service to process customer data, that use will require appropriate data minimization, security controls, and updated disclosure.
10
Tracking and cookies
The public website does not intentionally use advertising or behavioral-tracking systems. The Hagon application may use cookies or similar browser storage that is necessary for authentication, session security, and core product operation.
11
Retention
Hagon retains customer and security records for as long as reasonably needed to provide the service, preserve security history and evidence, meet contractual or operational requirements, and support recovery. Short-lived raw artifacts are minimized where durable normalized evidence is sufficient. Retention practices may vary by record type and will continue to be refined before broader availability.
12
Security
Hagon uses technical and operational controls intended to protect customer data, including tenant isolation, least-privilege access, authorization boundaries, encrypted transport, governed backups, and controlled administrative access. No system can guarantee absolute security.
13
Your choices
You may contact Hagon to update customer contact information, ask about information associated with your organization, or request assistance with account access and notification preferences. Some security and authorization records may need to be retained to preserve evidence, audit history, contractual obligations, or platform integrity.
14
Changes to this notice
We may update this notice as Hagon expands beyond controlled beta, adds new service providers or data uses, or introduces public registration, analytics, or broader commercial capabilities. Material changes will be reflected by an updated effective date.
15
Contact
Questions about this notice or Hagon's handling of customer information can be sent to support@hagontech.com.