yegg

Your data, minimized.

We collect what an engagement requires and not much else. Here's the whole picture in plain language.

01 — What we collect
  • Contact data. If you leave an email, we store it to reply. That's the list.
  • Engagement data. During a pentest we necessarily process findings, evidence, and asset data — governed by your contract and our security policy.
  • Site analytics. Basic, aggregate, no cross-site tracking, no ad tech.
02 — What we never do
  • Sell or share personal data with third parties for marketing.
  • Train shared models on your engagement data without written consent.
  • Retain data past its purpose or contract term.
03 — Your rights

Access, correct, delete.

Write to privacy@yegg.io to access, correct, export, or delete your personal data. We respond within 30 days.

04 — Counsel's copy

This notice is a starting template. Have counsel review and localize (GDPR/CCPA specifics, DPA terms, entity name) before launch.