BLACK HOLE
Cybersecurity & Digital Forensics
This policy explains how BLACK HOLE ("we", "us") handles personal data across blackholes.cloud and our products: BlackHole Cyber (SOC platform) and BLACK HOLE Digital Forensics.
| Category | Examples | Our role |
|---|---|---|
| Account data | Name, email, role, tenant, hashed password, MFA status, last login | Controller |
| Operator vetting (Forensics) | Applicant identity and authorisation details submitted for licensing at license.blackholes.cloud, machine fingerprint bound to a licence | Controller |
| Usage & audit | Actions in the platform, IP address, timestamps | Controller |
| Security telemetry (Cyber) | Usernames, hostnames, IPs, process/file/sign-in and web-server events from a customer's systems | Processor |
| Support data | Messages you send us | Controller |
| Purpose | Basis (applicable law) |
|---|---|
| Providing and securing the platforms and licences | Performance of a contract |
| Processing Cyber telemetry for a customer | On the customer's documented instructions |
| Vetting Forensics operators and preventing misuse | Legitimate interest / legal obligation |
| Authentication, audit logging, fraud prevention | Legitimate interest in a secure service |
| Billing, support and legal compliance | Contract / legal obligation |
When a customer installs the agent, it collects security-relevant events (failed logins, process execution, file changes, web requests) and sends them to that customer's isolated tenant. We use this only to run detections and make findings available to that customer's authorised users. We do not use one customer's telemetry for another, and we do not sell it or use it for advertising. Each customer is responsible for notifying its own staff and obtaining any consents the law requires.
The Forensics workstation runs on the operator's own computer. Evidence it extracts from a device is stored locally in the operator's case files and is not transmitted to us. We process only the operator's registration, vetting and licensing data, which we use to decide whether to issue a licence, to bind it to an authorised machine, and to prevent misuse. Operators are responsible for the lawful basis of each examination and for protecting the evidence they hold.
We do not sell personal data. We share it only with infrastructure providers hosting our services (as sub-processors under contract), with authorities where required by law, and with a successor in a merger or acquisition subject to this policy. A current sub-processor list is available on request at privacy@blackholes.cloud.
If a personal-data breach occurs, we will notify affected customers and, where required, the regulator in line with the applicable data-protection law.
Platform data is hosted in secure data centres. Where a customer requires data to remain in a specific region, we can arrange a deployment that meets that need, and any transfer is made only with appropriate safeguards under applicable data-protection law.
Subject to the applicable data-protection law, individuals may request access to, correction of, or deletion of their personal data, and may object to or restrict certain processing. For account, vetting and licensing data we hold as controller, contact us directly. For Cyber telemetry we hold as processor, contact the relevant customer organisation (the controller); we will assist. To exercise a right or complain: privacy@blackholes.cloud. You may also complain to the relevant data-protection authority.
Our platforms use only the storage they need to function — keeping your session token and interface preferences in your browser. We do not use third-party advertising or tracking cookies.
Our products are business and professional tools, not directed to children, and we do not knowingly collect children's personal data.
We may update this policy and will change the "Last updated" date; for material changes we will give reasonable notice.
Privacy questions or requests: privacy@blackholes.cloud.