Legal

Privacy Policy

Last updated: August 28, 2026

This policy is provided as a general description of RESEEKiT!'s data practices and has not been reviewed by outside legal counsel. If you need this reviewed for a specific compliance requirement (GDPR, CCPA, HIPAA, SOC 2, etc.), contact us before relying on it. RESEEKiT! is pre-launch, and this policy will be revisited before general availability.

1. Who this applies to

This Privacy Policy explains how RESEEKiT! ("RESEEKiT!," "we," "us"), a product of PROVE iT! Forensics, collects, uses, and protects information when you visit reseekit.com, join the waitlist, or use the RESEEKiT! platform as a customer. It covers two different kinds of data, and we treat them differently:

Account & visitor data: information about the people who use RESEEKiT!: names, emails, login activity, and information submitted through forms on this site. For this data, RESEEKiT! is the data controller.
Organization device data: the device inventory, status, and location signals a customer organization registers in RESEEKiT! to manage its own company-owned equipment. For this data, RESEEKiT! acts as a data processor on the customer's behalf. We process it to provide the service, not for our own purposes, and the customer organization controls what's collected, retained, and deleted.

2. Information we collect

Depending on how you interact with RESEEKiT!, we may collect:

Account information: name, work email, organization, role, and password (stored as a salted hash, never in plain text).
Usage & log data: login timestamps, IP address, session activity, and actions taken in the product, which we record in an append-only audit log for security and accountability purposes.
Waitlist & contact information: anything you submit through a waitlist or contact form on this site (name, email, and whatever you tell us about your team or environment).
Organization device data: device identifiers, assignment, status, and location signals a customer organization registers for its own company-owned equipment. This data always shows its source and confidence level; we do not represent it as more precise than it is.
Billing information: when subscription billing is active, payment is handled by our payment processor (Stripe); RESEEKiT! does not store full card numbers on its own servers.

3. What we deliberately do not collect

RESEEKiT! is an endpoint control and asset recovery tool, not a surveillance tool. We do not build in, and will not add, covert webcam or microphone capture, keylogging, or personal/spousal tracking features. Location and status signals are limited to company-owned devices an organization has explicitly registered, and are always shown with their source and confidence, never dressed up as more certain than they are.

4. How we use information

To provide, operate, and secure the RESEEKiT! platform, including authentication, role-based access control, device inventory, lost/unreturned workflows, and governed remote wipe for the organization that owns the data.
To respond to waitlist signups and inquiries submitted through this site.
To maintain the tamper-evident audit log that records administrative and security-relevant actions within an organization's own account.
To improve the product, troubleshoot issues, and maintain the reliability and security of the service.
To send service-related communications (for example, security notices or billing notices). We do not sell personal information, and we do not use organization device data for advertising.

5. Data sharing & subprocessors

We share data only as needed to run the service:

Infrastructure providers: RESEEKiT! is hosted on Google Cloud Platform (Cloud Run, Cloud SQL) in the United States.
Payment processing: Stripe, for organizations on a paid subscription.
Integration partners: where an organization connects RESEEKiT! to its own MDM, RMM, HRIS, or ITSM tools, data flows only as configured by that organization's own administrators.
Within your own organization: device data and account activity are visible to users your organization has granted access to, according to the roles and permissions your organization's admins configure.
We do not share organization device data across organizations. Each organization's data is logically isolated from every other organization's.
We may disclose information if required by law, or to protect the rights, property, or safety of RESEEKiT!, our customers, or others.

6. Data security

RESEEKiT! is built by the team behind PROVE iT! Forensics' other products, and security is treated as a core product requirement, not an afterthought. This includes encryption in transit and at rest, hashed credentials, multi-factor authentication, configurable session timeouts, role-based access control, dual-approval controls on the highest-stakes actions (freezes and wipes), and a hash-chained audit log designed so that administrative actions can't be silently altered after the fact. No system is perfectly secure, and we can't guarantee absolute security, but we design and operate the platform with that goal in mind.

7. Data retention

We retain account data for as long as an account is active, plus a reasonable period afterward for legal, security, and record-keeping purposes. Organization device data is retained according to the retention settings and plan of the organization that owns it; an organization can request deletion of its own data by contacting us. Audit log entries are retained in an append-only form for accountability and are not deleted on request, consistent with their purpose as a tamper-evident record.

8. Your rights

Depending on where you're located, you may have rights to access, correct, export, or delete personal information we hold about you, or to object to certain processing. If you're an end user inside a customer organization, the fastest path is usually through your organization's own admin, since they control your account. You can also contact us directly at proveitforensics@gmail.com and we'll work with you (and, where relevant, your organization) to resolve the request.

9. International data transfers

RESEEKiT!'s infrastructure is currently hosted in the United States. If you're accessing RESEEKiT! from outside the United States, your information will be transferred to and processed in the United States.

10. Children's privacy

RESEEKiT! is a business product intended for use by IT and security professionals on behalf of their organizations. It is not directed at, and we do not knowingly collect information from, children under 16.

11. Changes to this policy

We may update this policy as RESEEKiT! evolves. We'll update the "Last updated" date above when we do, and for material changes we'll make a reasonable effort to notify account admins directly.

12. Contact us

Questions about this policy or how your data is handled: proveitforensics@gmail.com.