Last updated: 10 November 2026
When you submit the contact form, we collect:
During a paid audit, we may receive scan output from your server. This output includes system configuration metadata (file permissions, process names, listening ports, firewall status) — not application data or customer data.
Form submissions are stored in our lead database and deleted after 90 days if no engagement results. Audit reports and scan data are deleted 30 days after engagement completion unless you request otherwise. Monitoring retainer data is kept for the duration of the retainer plus 30 days.
Form data is transmitted over HTTPS (TLS via Cloudflare). Audit reports are delivered via encrypted email or a secure link. We do not store payment card details — payments are processed by Stripe.
You may request a copy of the data we hold about you, ask us to correct it, or ask us to delete it. Contact [email protected].
AI Security Monitor is operated from New Zealand. If you are in the EU, UK, or another jurisdiction with data transfer restrictions, your form submission and audit data will be processed in New Zealand and on servers located in the EU (Cloudflare edge network, Contabo VDS).
We will update this page if our practices change. The date at the top reflects the last revision.
Corey McIVOR
[email protected]
AI Security Monitor