Privacy Policy

Updated: September 27, 2026

Overview

Torch Security Ltd. (Israel) and Torch Security Inc. (United States) ("Torch", "we", "us") operate https://torch.security (the "Website"). This Privacy Policy explains what personal information we collect through the Website and in our dealings with prospects, customers, partners and event attendees, how we use it, and the rights you have. Torch is the controller of this information.

This policy does not cover data that our customers put into the Torch platform. We process that data on our customers' behalf and on their instructions, under our agreements with them. If you have a question about it, please contact the relevant customer.

Table of Contents

1. What Personal Information we collect, why we collect it, and how it is used
2. How we protect and retain your Personal Information
3. How we share your Personal Information
4. SMS/Text message communications
5. Your privacy rights
6. International transfers of Personal Information
7. Use by children
8. Interaction with third party products
9. Analytics, cookies and Do Not Track
10. California residents
11. Changes to this policy
12. Contact us

1. What Personal Information We Collect

Information you give us: your name, work email address, company, role, and the details of your request when you ask for a demo, request access to Identity Studio, request a connector, or contact us; your mobile phone number, where you choose to provide it; and what you share with us in emails, meetings, webinars and at events.

Information collected automatically: when you search our integrations catalog, we record the search term together with your IP address and approximate location (city, region and country). Our hosting provider processes your IP address and browser information to deliver the Website, and our web fonts are served by Google Fonts, which receives your IP address when a page loads.

Information from other sources: business contact details that are publicly available or that our partners share with us.

You are not legally required to give us personal information. If you do not provide your name and email address with a request, we cannot respond to it.

How We Use It, and Our Legal Bases

• To respond to your requests and enquiries - our legitimate interest in answering people who contact us, or steps you ask us to take before entering into a contract.
• To provide our services and manage customer relationships - performance of a contract.
• To send you information about Torch products and events - your consent where the law requires it, and otherwise our legitimate interest in communicating with business contacts. You can opt out at any time.
• To understand how the Website is used and improve it - our legitimate interest in running a useful website.
• To keep the Website and our business secure, prevent fraud, and comply with the law - our legitimate interests and our legal obligations.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

2. How We Protect and Retain Your Personal Information

Security: We protect personal information with technical and organizational measures appropriate to the risk. No method of transmission or storage is completely secure.

Retention: We keep contact and enquiry information while we have an active or prospective business relationship with you, and delete it when it is no longer needed for that purpose, unless the law requires us to keep it longer or we need it to establish or defend legal claims.

3. How We Share Your Personal Information

We do not sell personal information. We share it only with:

• service providers that host the Website, deliver email, and provide the business tools we use, acting on our instructions;
• Torch Security Ltd. and Torch Security Inc., as affiliates of each other;
• our professional advisers and auditors;
• regulators, courts and law enforcement, where the law requires it;
• a buyer, investor or successor in a merger, acquisition or sale of assets, subject to confidentiality obligations;
• anyone else, with your consent.

4. SMS/Text Message Communications

If you provide your mobile phone number and consent to receive text messages from Torch, the following terms apply:

No sharing of mobile information: Mobile phone numbers and text messaging consent are never shared with third parties or affiliates for their marketing or promotional purposes. We do not sell your mobile number, and no mobile information will be shared with third parties for any purpose other than delivering the messages you have requested (for example, our messaging service providers acting on our behalf).

Message frequency: Message frequency varies depending on your interactions with us.

Message and data rates: Message and data rates may apply.

Opting out: Reply STOP to any message to unsubscribe, or reply HELP for assistance. You can also contact privacy@torch.security.

5. Your Privacy Rights

Depending on where you live, you may have the right to access your personal information, correct it, delete it, restrict or object to our use of it, receive a copy of it in a portable format, and withdraw your consent at any time (without affecting processing that took place before). Residents of Israel have rights of access and correction under the Protection of Privacy Law, 5741-1981.

To exercise any of these rights, email privacy@torch.security. We may need to verify your identity before acting on a request, and you may use an authorized agent.

You also have the right to lodge a complaint with a data protection authority: in the EU or UK, the authority where you live or work; in Israel, the Privacy Protection Authority.

Marketing emails: use the unsubscribe link in any marketing email, or email privacy@torch.security.

6. International Transfers of Personal Information

Torch operates from Israel and the United States, and our service providers may process personal information in other countries. The European Commission recognizes Israel as providing an adequate level of protection. When we transfer personal information from the European Economic Area, the UK or Switzerland to a country without such a decision, we rely on the European Commission's Standard Contractual Clauses or another transfer mechanism recognized by law.

7. Use by Children

The Website is intended for business users. We do not knowingly collect personal information from anyone under 18. If you believe we have, contact privacy@torch.security and we will delete it.

8. Interaction with Third Party Products

The Website links to third-party websites and services, such as LinkedIn and Calendly. We are not responsible for their privacy practices; please review their privacy policies.

9. Analytics, Cookies and Do Not Track

We use Vercel Web Analytics to count page views. It does not use cookies and does not identify individual visitors. The Website does not use advertising or tracking cookies, and no third party collects personal information about your online activities over time and across different websites through the Website. We honor browser "Do Not Track" signals: the Website does not track any visitor across websites, so a visitor who sends the signal is not tracked. If this changes, we will update this policy.

10. California Residents

We do not sell personal information or share it for cross-context behavioral advertising. See section 9 for how the Website responds to "Do Not Track" signals.

11. Changes to This Policy

We may update this policy from time to time. The "Updated" date at the top shows when it last changed, and we will make material changes clear on the Website.

12. Contact Us

For questions or complaints about this policy, or to exercise your rights, contact privacy@torch.security.