https://bluelanternsecurity.io/PrivacyPolicy-sJ5zdRkI.js

1import{j as e,P as s}from"./index-Dyb6OM34.js";import{S as a}from"./shield-CmuyZR1b.js";const n="May 28, 2026",i=[{label:"Uploaded files and emails",value:"No more than 1 day"},{label:"Generated reports",value:"Exactly 1 week"},{label:"Auth and API access logs",value:"90 days"},{label:"Support emails and troubleshooting",value:"Up to 1 year"},{label:"Run and purchase metadata",value:"Retained indefinitely"},{label:"On-premises outputs",value:"Stored locally by the customer"}];function c(){return e.jsxs("div",{className:"min-h-screen bg-slate-950 px-6 pb-16 pt-24 text-white",children:[e.jsx(s,{title:"Privacy Policy | Blue Lantern Security",description:"How Blue Lantern Security handles uploaded files, generated reports, access logs, and on-premises outputs. Retention windows and data handling commitments.",path:"/privacy"}),e.jsxs("div",{className:"mx-auto max-w-4xl space-y-10",children:[e.jsxs("header",{className:"relative overflow-hidden rounded-[2rem] border border-slate-800 bg-slate-900 p-8 shadow-2xl shadow-slate-950/30 md:p-10",children:[e.jsx("div",{className:"absolute -right-16 -top-16 h-56 w-56 rounded-full bg-cyan-500/10 blur-3xl"}),e.jsx("div",{className:"absolute -bottom-20 left-0 h-56 w-56 rounded-full bg-blue-500/10 blur-3xl"}),e.jsxs("div",{className:"relative z-10 space-y-8",children:[e.jsxs("div",{className:"space-y-5",children:[e.jsxs("div",{className:"inline-flex items-center gap-2 rounded-full border border-cyan-500/20 bg-cyan-500/10 px-3 py-1 text-xs font-semibold uppercase tracking-[0.24em] text-cyan-300",children:[e.jsx(a,{className:"h-3.5 w-3.5"}),"Data Privacy Policy"]}),e.jsxs("div",{children:[e.jsx("h1",{className:"text-4xl font-bold tracking-tight text-white md:text-5xl",children:"Blue Lantern Security Data Privacy Policy"}),e.jsx("p",{className:"mt-4 max-w-3xl text-base leading-7 text-slate-300 md:text-lg",children:"This policy explains what customer and account data Blue Lantern Security retains in connection with its SaaS and on-premises security tooling, how long that data is retained, and how it is handled within our systems."})]}),e.jsxs("div",{className:"flex flex-wrap items-center gap-3 text-sm text-slate-300",children:[e.jsxs("span",{className:"rounded-full border border-slate-700 bg-slate-950/60 px-3 py-1.5",children:["Effective date: ",n]}),e.jsx("span",{className:"rounded-full border border-slate-700 bg-slate-950/60 px-3 py-1.5",children:"Applies to SaaS and on-premises offerings"})]})]}),e.jsxs("div",{className:"rounded-3xl border border-slate-800 bg-slate-950/60 p-6 backdrop-blur",children:[e.jsx("h2",{className:"text-lg font-semibold text-white",children:"Retention at a glance"}),e.jsx("p",{className:"mt-3 text-sm leading-6 text-slate-400",children:"Fixed retention periods apply to uploaded inputs, generated reports, operational security logs, and support records. Transaction metadata is retained indefinitely. On-premises outputs remain under customer-local storage and control."}),e.jsx("div",{className:"mt-6 grid gap-3 sm:grid-cols-2 lg:grid-cols-3",children:i.map(t=>e.jsxs("div",{className:"rounded-2xl border border-slate-800 bg-slate-900/70 p-4",children:[e.jsx("p",{className:"text-sm font-medium text-white",children:t.label}),e.jsx("p",{className:"mt-1 text-sm text-cyan-300",children:t.value})]},t.label))})]})]})]}),e.jsx("article",{className:"rounded-3xl border border-slate-800 bg-slate-900/70 p-8 shadow-xl shadow-slate-950/20 md:p-10",children:e.jsxs("div",{className:"space-y-10 text-[15px] leading-7 text-slate-300",children:[e.jsxs("section",{children:[e.jsx("h2",{className:"mb-3 text-lg font-semibold text-white",children:"1. Scope of This Policy"}),e.jsx("p",{children:"This policy describes the categories of data retained through Blue Lantern Security's hosted platform and on-premises toolset, the retention periods that apply to that data, and the controls used to limit access to customer information."}),e.jsxs("p",{className:"mt-4",children:["It also applies to visitors of Blue Lantern Security's websites: the public marketing site at"," ",e.jsx("span",{className:"font-mono text-cyan-300",children:"bluelanternsecurity.com"})," and the application site at"," ",e.jsx("span",{className:"font-mono text-cyan-300",children:"bluelanternsecurity.io"}),". Analytics and cookie practices for each site are described 

1in Section 9."]}),e.jsx("p",{className:"mt-4",children:"The policy is focused on operational product data: account identity data, authentication credentials, analysis inputs, generated reports, transaction metadata, and data produced by the on-premises toolset."})]}),e.jsx("hr",{className:"border-slate-800"}),e.jsxs("section",{children:[e.jsx("h2",{className:"mb-3 text-lg font-semibold text-white",children:"2. Account Data and Access Controls"}),e.jsx("p",{children:"When a user signs up for an account, Blue Lantern Security retains the user's email address, password credential, first name, and last name. This information is stored in AWS Cognito and within our internal systems for identity and account administration purposes."}),e.jsx("p",{className:"mt-4",children:"During authentication, a user's account information is used to grant access only to that user's own account data. Users are not permitted to access another customer's data. Access is restricted through the unique identifier associated with the user in AWS Cognito."})]}),e.jsx("hr",{className:"border-slate-800"}),e.jsxs("section",{children:[e.jsx("h2",{className:"mb-3 text-lg font-semibold text-white",children:"3. API Keys"}),e.jsx("p",{children:"Each user may generate up to one API key for use in place of a username and password when authenticating to the platform through supported programmatic interfaces."}),e.jsx("p",{className:"mt-4",children:"API keys are stored in encrypted form and are maintained in a separate database used for authentication validation. This database is used only to support authentication and access control workflows."})]}),e.jsx("hr",{className:"border-slate-800"}),e.jsxs("section",{children:[e.jsx("h2",{className:"mb-3 text-lg font-semibold text-white",children:"4. SaaS Analysis Inputs and Generated Reports"}),e.jsx("p",{children:"Blue Lantern Security's SaaS services primarily deliver analysis to users in the form of reports. Those reports are retained for exactly one week so that users have time to review and download them through the user interface or API before they are deleted from our systems."}),e.jsx("p",{className:"mt-4",children:"Reports may be generated from customer-submitted emails or files, which can contain sensitive information. The original submitted file or email content is retained for no more than one day. If sensitive values such as IP addresses, domain names, or email addresses appear within the generated report itself, those values may remain available for the one-week lifetime of that report."}),e.jsx("p",{className:"mt-4",children:"Reports are accessible only to the user who generated them and are stored in a dedicated file system area associated with that user."})]}),e.jsx("hr",{className:"border-slate-800"}),e.jsxs("section",{children:[e.jsx("h2",{className:"mb-3 text-lg font-semibold text-white",children:"5. Transaction Logs and Payments"}),e.jsx("p",{children:"Metadata about each analysis run and subscription transaction is retained indefinitely in our transaction log database. This allows users and administrators to confirm that a particular run occurred and which account it was billed to."}),e.jsx("p",{className:"mt-4",children:"Card payment processing for purchases made through the application site is handled by Stripe. Blue Lantern retains transaction records including Stripe checkout metadata, the date of the transaction, the number of seats licensed, and the amount paid."}),e.jsx("p",{className:"mt-4",children:"These transaction records do not contain the underlying analysis results or the customer inputs used to produce those results."})]}),e.jsx("hr",{className:"border-slate-800"}),e.jsxs("section",{children:[e.jsx("h2",{className:"mb-3 text-lg font-semibold text-white",children:"6. Operational Security Logs"}),e.jsx("p",{children:"Blue Lantern retains operational security logs related to authentication and API access, including IP address data, user-agent data, and API request logs, for 90 days."}),e.jsx("p",{className:"mt-4",children:"These logs are maintained for security and operational monitoring and are retained separately from customer-facing account profile information."})]}),e.jsx("hr",{className:"border-slate-800"}),e.jsxs("section",{children:[e.jsx("h2",{className:"mb-3 text-lg font-semibold text-white",children:"7. On-Premises Tooling"}),e.jsx("p",{children:"Blue Lantern Security's on-premises tooling is designed for use cases involving more sensitive data than may be appropriate for the SaaS environment because customer analysis data is not sent back to our SaaS systems as part of ordinary operation."}),e.jsx("p",{className:"mt-4",children:"Data generated by the on-premises toolset is stored locally in the environment where the customer installs and operates the softw

1are. Blue Lantern Security does not store those locally generated outputs in its SaaS backend unless the customer separately chooses to transmit data to the hosted platform."})]}),e.jsx("hr",{className:"border-slate-800"}),e.jsxs("section",{children:[e.jsx("h2",{className:"mb-3 text-lg font-semibold text-white",children:"8. External Communications and Optional Features"}),e.jsx("p",{children:"Although on-premises tools do not return customer data to Blue Lantern Security's backend systems during normal operation, certain tools may send limited information to third-party services when that is necessary to perform a requested security check. For example, a tool may perform a WHOIS lookup against an external service."})]}),e.jsx("hr",{className:"border-slate-800"}),e.jsxs("section",{children:[e.jsx("h2",{className:"mb-3 text-lg font-semibold text-white",children:"9. Third-Party Providers, Browser Session Data, Website Analytics, and Advertising"}),e.jsxs("p",{children:["The analytics, advertising, and session storage practices described in this section apply to the application site at ",e.jsx("span",{className:"font-mono text-cyan-300",children:"bluelanternsecurity.io"}),". The public marketing site at ",e.jsx("span",{className:"font-mono text-cyan-300",children:"bluelanternsecurity.com"})," sets no cookies and loads no analytics or advertising tags, and therefore does not present a cookie banner."]}),e.jsx("p",{className:"mt-4",children:"Blue Lantern Security uses AWS Cognito for account identity and authentication workflows. When users purchase Seat Licenses through the application site, payment processing is initiated through Stripe."}),e.jsx("p",{className:"mt-4",children:"For authenticated use of the application site, the frontend stores session authentication values in browser session storage, including the current ID token, access token, and expiration timestamp, so the signed-in session can be maintained during active use. These values are cleared when the user signs out or when the session expires."}),e.jsxs("p",{className:"mt-4",children:["Blue Lantern uses Google Analytics 4 (measurement ID ",e.jsx("span",{className:"font-mono text-cyan-300",children:"G-75PPMEX26G"}),") to understand how visitors navigate the application site so we can improve it. Google Analytics may set first-party cookies (typically named ",e.jsx("span",{className:"font-mono text-cyan-300",children:"_ga"})," and ",e.jsx("span",{className:"font-mono text-cyan-300",children:"_ga_<id>"}),") and collect information such as page paths, referring URL, approximate geographic region derived from IP, device and browser characteristics, and timestamps. Data collected by Google Analytics is processed by Google and may be transferred to and stored on servers operated by Google, including outside the visitor's country."]}),e.jsxs("p",{className:"mt-4",children:["Blue Lantern also uses Microsoft Advertising's Universal Event Tracking (UET) tag (tag ID ",e.jsx("span",{className:"font-mono text-cyan-300",children:"97248234"}),") to measure the effectiveness of advertising campaigns and to attribute conversions originating from Microsoft search and display networks. When enabled by visitor consent, UET may set first-party cookies (typically named ",e.jsx("span",{className:"font-mono text-cyan-300",children:"_uetsid"})," ","and ",e.jsx("span",{className:"font-mono text-cyan-300",children:"_uetvid"}),") and collect information such as page paths, referring URL, conversion events, device and browser characteristics, and approximate geographic region derived from IP. Single-page-app route changes are tracked automatically. Data collected by UET is processed by Microsoft Corporation, may be transferred to and stored on servers operated by Microsoft including outside the visitor's country, and may be used by Microsoft for advertising measurement, attribution, and audience-building consistent with Microsoft's own privacy and advertising policies."]}),e.jsxs("p",{className:"mt-4",children:["Blue Lantern also uses the Meta Pixel (pixel ID ",e.jsx("span",{className:"font-mono text-cyan-300",children:"972010459011763"}),") to measure the effectiveness of advertising campaigns and to attribute conversions originating from Meta's networks, including Facebook and Instagram. When enabled by visitor consent, the Meta Pixel may set first-party cookies (typically named ",e.jsx("span",{className:"font-mono text-cyan-300",children:"_fbp"})," ","and ",e.jsx("span",{className:"font-mono text-cyan-300",children:"_fbc"}),") and collect information such as page paths, referring URL, conversion events, device and browser characteristics, and approximate geographic region derived from IP. Single-page-app route changes are tracked automatically. Data collected by the Meta Pixel is processed by Meta Platforms, Inc., may be transferred to and stored on servers operated by Meta including outside the visitor's country, and may be used by Meta for advertising measurement, attribution, and audience-building consistent with Meta's own privacy and advertising policies."]}),e.jsxs("p",{className:"mt-4",children:["Google Analytics, Microsoft Advertising, and the Meta Pixel are loaded using Consent Mode, with",e.jsx("span",{className:"font-mono text-cyan-300",children:" analytics_storage"}),","," ",e.jsx("span",{className:"font-mono text-cyan-300",children:"ad_storage"}),","," ",e.jsx("span",{className:"font-mono text-cyan-300",children:"ad_user_data"}),", and"," ",e.jsx("span",{className:"font-mono text-cyan-300",children:"ad_personalization"}

1)," all set to",e.jsx("span",{className:"font-semibold text-white",children:" denied by default"}),". No analytics or advertising cookies are set, and no measurement data is sent to Google, Microsoft, or Meta, unless and until a visitor accepts the cookie banner presented on first visit to the application site. Accepting the banner switches all four signals to granted for the duration of the visitor's recorded consent; declining keeps them denied."]}),e.jsxs("p",{className:"mt-4",children:["A visitor's consent decision is recorded in browser local storage under the key",e.jsx("span",{className:"font-mono text-cyan-300",children:" bl_consent_v3"}),". To change or withdraw consent at any time, a visitor can use the ",e.jsx("span",{className:"font-semibold text-white",children:"Cookie preferences"})," link in the application site footer to reopen the banner and make a new selection. Visitors may also clear site data in their browser, or use browser settings, extensions, or Google's and Microsoft's own opt-out mechanisms to block these tags independently of this banner. If the banner version changes in the future, any prior consent will be invalidated and visitors will be re-prompted under the updated terms."]})]}),e.jsx("hr",{className:"border-slate-800"}),e.jsxs("section",{children:[e.jsx("h2",{className:"mb-3 text-lg font-semibold text-white",children:"10. Account Deletion, Anonymization, and Backup Archives"}),e.jsx("p",{children:"Before account deletion is finalized, any active API key must be revoked."}),e.jsx("p",{className:"mt-4",children:"When an account is deleted, Blue Lantern deletes the related AWS Cognito records. Internal identity records are anonymized, and transaction log records are anonymized rather than removed in full."}),e.jsx("p",{className:"mt-4",children:"As of the effective date of this policy, Blue Lantern has not configured archival backups for this data. If encrypted backup archives are introduced in the future, deleted data may remain in those archives until the applicable backup retention period expires and may not be immediately removable from those archives."})]}),e.jsx("hr",{className:"border-slate-800"}),e.jsxs("section",{children:[e.jsx("h2",{className:"mb-3 text-lg font-semibold text-white",children:"11. Data Location, Security Measures, and Support Records"}),e.jsx("p",{children:"Blue Lantern processes SaaS customer data in the eastern United States. On-premises data remains in the environment where the customer runs the tool. If the customer enables on-premises license retrieval features, that communication is made to Blue Lantern systems located in the eastern United States."}),e.jsx("p",{className:"mt-4",children:"Blue Lantern encrypts data in transit and at rest and restricts access to production environments."}),e.jsx("p",{className:"mt-4",children:"Support and troubleshooting emails, together with related support materials voluntarily provided by the customer, may be retained for up to one year."})]}),e.jsx("hr",{className:"border-slate-800"}),e.jsxs("section",{children:[e.jsx("h2",{className:"mb-3 text-lg font-semibold text-white",children:"12. Privacy Requests, Policy Updates, and Contact"}),e.jsxs("p",{children:["Users may request information about their data, or submit privacy-related questions, at any time by contacting"," ",e.jsx("a",{href:"mailto:[email protected]",className:"text-cyan-400 transition-colors hover:text-cyan-300 hover:underline",children:"[email protected]"}),". Blue Lantern will review and respond to privacy-related requests within a reasonable time and in accordance with applicable law."]}),e.jsx("p",{className:"mt-4",children:"Blue Lantern Security may update this policy from time to time to reflect changes in its products, infrastructure, or retention practices. The latest version will be posted on this page, which is linked from both bluelanternsecurity.com and bluelanternsecurity.io, with an updated effective date."}),e.jsxs("p",{className:"mt-4",children:["Questions regarding this policy may be sent to"," ",e.jsx("a",{href:"mailto:[email protected]",className:"text-cyan-400 transition-colors hover:text-cyan-300 hover:underline",children:"[email protected]"}),"."]})]})]})})]})]})}export{c as default};