Privacy Policy
Effective: August 23, 2026
This policy explains how FortiSPY collects, uses, stores and discloses personal data when you visit our website, create an account, purchase a subscription or use the service.
1. Who controls your data
FortiSPY is the controller of account, billing and website data. Each customer organization is the controller of activity collected from its managed devices; FortiSPY processes that device data on the customer’s instructions. Before launch, replace this paragraph with the legal company name, registration number, physical address and privacy contact.
2. Data we collect
- Account data such as name, email, organization and authentication details.
- Subscription and transaction references from Paystack or Flutterwave. We do not store complete card details.
- Device identifiers, operating-system and application version, configuration and last-seen time.
- Customer-configured activity such as application events, web events, screenshots and keystrokes.
- Security and audit data such as IP address, sign-in events and administrative changes.
3. Why we use it
We use data to provide and secure the service, synchronize authorized devices, administer subscriptions, prevent abuse, support customers, comply with law and improve reliability.
4. Sharing
We share only what is necessary with infrastructure, email, storage and payment providers acting under contract, and with authorities when legally required. We do not sell personal data or use device activity for advertising.
5. Transfers and retention
Data may be processed where our providers operate, subject to appropriate safeguards. Device activity follows the subscribed retention period or earlier customer deletion. Backups expire on a controlled schedule.
6. Security
We use tenant isolation, access controls, encryption of sensitive data at rest and in transit, hashed credentials and optional email 2FA. Customers must restrict administrator access and keep credentials confidential.
7. Your rights
Depending on location, individuals may request access, correction, deletion, restriction, portability or objection. Managed-device users should normally contact the organization that deployed FortiSPY. Account holders may contact privacy@fortispy.com.
8. Children
This workplace service is not directed to children and must not be used to monitor a child through an organization account. A separate family product must have its own child-safety disclosures and parental-consent process.
9. Changes
We will post material changes here and provide additional notice where required.