Privacy Policy

1. Who We Are

JACKR Defense LLC ("JACKR," "we," or "us") is a Texas limited liability company providing Leonidas network-security monitoring. We do not publish our private mailing address on this website. Legally required notices may be sent using the address provided in an executed agreement.

2. Information We Collect

• Contact and account data: name, company, email, telephone number, authorized contacts, service selections, consent and authorization records, and support communications.
• Billing data: invoice, payment-status, and transaction records. Payment-card or bank credentials are handled by the applicable payment provider and are not intentionally stored by JACKR unless expressly disclosed.
• Website data: IP address, approximate location, browser/device information, pages viewed, referring URLs, and Google Analytics identifiers or cookies.
• Leonidas operational data: device/network identifiers, trust state, security events, ports, services, vulnerability results, DNS data where enabled, Pro traffic/firewall/syslog metadata, intrusion-detection metadata, Central commands, reports, and exports.
• SMS data: telephone number, opt-in and opt-out records, delivery status, alert history, and message interactions when Twilio alerts are enabled.

Leonidas does not intentionally collect customer file contents, stored passwords, personal message content, or general packet payloads. DNS and connection metadata may nevertheless reveal sensitive activity.

3. How We Use Information

• Provide, configure, secure, administer, and support Leonidas Base or Pro.
• Discover devices, identify risks, perform authorized scans, deliver alerts and reports, and carry out approved response actions.
• Operate mandatory Central telemetry and management, maintain authorization and command records, and troubleshoot service health.
• Process billing, communicate about service, improve reliability, prevent misuse, and satisfy legal obligations.

4. Local Appliance and JACKR Central

Leonidas stores operational data locally on a JACKR-owned appliance at the customer site and securely transmits operational records to JACKR Central in Texas. Central stores device, event, security-state, command-history, report-telemetry, and raw-export records. At launch, Central administrative access is restricted to JACKR's Managing Member. Direct Tailscale troubleshooting requires case-specific customer approval.

5. Sharing and Service Providers

We do not sell personal information. We may disclose limited information to vendors providing hosting, payment processing, analytics, email, SMS/Twilio, security, and professional services; in a merger or asset transaction; with consent; or when required by law or necessary to protect rights, safety, and systems. Vendors may use data only for the contracted purpose and subject to applicable safeguards.

6. Retention and Deletion

• Local security events and Pi-hole DNS: 30 days
• Router/syslog: 14 days
• Local device records: while service is active
• Central device/event data, command history, report telemetry, reports, and raw exports: 30 days
• Support communications: 3 years
• Billing/account records: 7 years
• Marketing contacts: until opt-out or 3 years of inactivity
• Website analytics: up to 26 months
• Encrypted backups, if maintained: rolling retention up to 35 days

Non-billing Central customer data is deleted within 30 days after termination, subject to legal holds and limited backup rotation. Returned appliances are wiped within 10 days after receipt using a NIST SP 800-88-aligned process, and JACKR issues a deletion certificate within five business days after the wipe.

7. Cookies and Analytics

The website uses essential technologies and Google Analytics. You may restrict cookies through browser controls. Where applicable law requires consent, optional analytics or marketing technologies will be presented through an appropriate consent mechanism.

8. SMS Alerts

SMS alerts are optional for both Base and Pro. Consent is not a condition of purchase. Alert categories may include unknown devices, malicious IP addresses, high- or medium-risk ports, automated responses, and device/service health. Message frequency varies; carrier message and data rates may apply. Reply STOP to opt out or HELP for help. Opting out of SMS does not stop required service notices sent by another method.

9. Your Privacy Choices

Depending on applicable law, you may request access, correction, deletion, restriction, portability, or withdrawal of consent. We may verify identity and authority before acting. California and other state privacy rights apply only when the relevant law covers JACKR and the request. Submit requests to anthony@jackrdefense.com.

10. Security and Children

We use reasonable administrative, technical, and physical safeguards, including encrypted transport, authenticated systems, access restrictions, least-privilege controls, and logging where supported. No system is completely secure. Our business services are not directed to children under 18.

11. Changes and Contact

Material changes will be posted with an updated date and communicated to active customers when appropriate. A public-policy update does not override fixed terms in an existing signed agreement unless validly amended.