Privacy Policy

Privacy Policy

Fenko Limited ("Fenko", "we", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose and protect personal information in connection with the Risky Plugins platform and related services (the "Services").

We operate from New Zealand and comply with the New Zealand Privacy Act 2020. Where we process personal information of individuals in other jurisdictions, we take reasonable steps to align with applicable requirements.

For company details and contact information, see Fenko.nz.

1. Information We Collect

• Account and contact information: name, organisation, role, email, authentication identifiers.
• Usage and technical data: IP address, device and browser details, logs, activity and interaction with the Services.
• Configuration and content you submit: monitored assets, queries, uploads, support requests and feedback.
• Billing and transactional data (for paid plans): subscription details, payment status and invoices (payments may be processed by third-party providers).

2. How We Use Personal Information

• To provide, operate and support the Services and your account.
• To authenticate users, manage access and maintain security.
• To deliver dashboards, alerts, reports and related outputs.
• To monitor performance, detect abuse and improve our detections, analytics and infrastructure.
• To communicate about updates, incidents and support.
• To generate aggregated or de-identified insights that help us enhance the Services.
• To comply with legal obligations and enforce our rights.

3. Cookies and Similar Technologies

We may use cookies and similar technologies for authentication, security, preferences and analytics. You can manage cookies via your browser settings, but some features may not work correctly if certain cookies are disabled.

4. Disclosure of Personal Information

• Service providers that support hosting, infrastructure, security, analytics, communications, billing and support, under appropriate safeguards.
• Your organisation, where your account is provisioned through an organisation account.
• Regulators, law enforcement or other parties where required by law, or reasonably necessary to protect rights, safety or security.
• Potential acquirers or partners in connection with a merger, acquisition or similar transaction, subject to confidentiality protections.

We do not sell personal information.

5. International Transfers

We may transfer personal information to countries outside New Zealand where our service providers operate. We take reasonable steps to ensure such transfers provide overall comparable safeguards to those required under the New Zealand Privacy Act 2020.

6. Data Security

We implement technical and organisational measures appropriate to the nature of the data and risks to protect against unauthorised access, alteration or disclosure. No method is completely secure, but we work to maintain robust safeguards.

7. Data Retention

We retain personal information only as long as reasonably necessary to provide the Services, meet legal obligations, resolve disputes and enforce agreements. Aggregated or de-identified data that does not identify you may be retained longer.

8. Your Rights

Subject to applicable law, you may request access to and correction of your personal information, and may have additional rights such as deletion, restriction or objection in certain cases. In New Zealand, you may also complain to the Office of the Privacy Commissioner (privacy.org.nz). We may need to verify your identity before responding.

9. Children

The Services are not directed to children under 16 and we do not knowingly collect personal information from them.

10. Third-Party Services

Third-party sites or services linked or integrated with the Services are governed by their own policies. We are not responsible for their practices.

11. Use of Data for Training and Competitive Purposes

We may use aggregated and de-identified technical and usage data, and risk-related patterns, to improve our detections and platform. We do not publicly disclose information in a way that identifies you without consent.

Customers and third parties are not permitted to use personal information or Service Data obtained through the Services to train, develop or improve competing tools, models, datasets or services, in line with our Terms of Service.

12. Changes

We may update this Policy from time to time by posting an updated version here. Material changes will be signalled within the Service or on our website. Continued use after changes take effect constitutes acceptance.

13. Contact

For privacy questions or requests, contact us using the details on Fenko.nz.