Privacy Policy

To provide the Dark Web Monitoring service, Mitigata collects limited information directly from you:

• Name
• Email address
• Phone number
• Policy number associated with the service

Users are not required to submit Aadhaar numbers, PAN numbers, or other sensitive identity identifiers to use this service.

Mitigata uses the collected information only for purposes directly related to operating the Dark Web Monitoring service, including:

• Generating monitoring reports
• Identifying potential breach records associated with submitted contact information
• Delivering service results to the user
• Verifying policy eligibility
• Providing customer support
• Maintaining the security and integrity of the service

Personal information is not used for any unrelated purposes.

Mitigata does not collect sensitive identifiers. Where breach intelligence datasets contain such identifiers linked to compromised accounts, they are processed solely for the purpose of analysis and are masked within Mitigata’s systems. These identifiers are not stored in readable form as part of user records.

Mitigata does not sell or rent personal information to third parties. Information may be shared only if the following limited circumstances apply:

• With trusted service providers that support the technical operation of the service, under strict confidentiality obligations
• With partner organizations that provide the monitoring service as part of a bundled offering
• Where required by applicable law, regulation, or valid legal process

All service providers are contractually required to handle personal information securely and only for authorized purposes.

Mitigata implements appropriate technical and organizational safeguards to protect personal information from unauthorized access, misuse, alteration, or disclosure. These safeguards include secure data transmission protocols, restricted system access controls, and internal security monitoring procedures.

While we take reasonable steps to protect your information, no method of electronic transmission or storage is completely secure. We encourage users to contact us promptly if they suspect any unauthorized use of their information.

Personal information collected for the Dark Web Monitoring service is retained only for as long as necessary to provide the monitoring service, communicate service results, and comply with applicable legal requirements.

As a general practice, personal information is retained for no longer than 12 months following the conclusion of the active service period, unless a longer retention period is required by law. Information that is no longer required will be securely deleted or anonymised.

You may have the right to:

Mitigata may update this Privacy Policy periodically to reflect changes in our practices or applicable legal requirements. You will be published on this page with the “Last Updated” date. We encourage users to review this policy periodically. Continued use of the service following any updates constitutes acceptance of the revised policy.

If you have questions or concerns regarding this Privacy Policy or the Dark Web Monitoring service, please contact us: