Privacy Policy
Last updated: September 10, 2026
1. Introduction
Bullfrog Security ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you visit our website, join our waitlist, or use an early-access version of our egress filtering service for AI agents and other Linux environments (together, "the Service").
The Service is under development. Today, the information we handle comes mostly from this website and the waitlist. Section 2.3 describes what the software itself will collect once you run it, and we will update this policy before general availability.
2. Information We Collect
2.1 Waitlist Information
You join the waitlist by emailing us. We collect what that email contains, such as:
- Your email address
- Your name, company, and role, if you choose to provide them
- Anything you tell us about how you plan to use the Service
2.2 Website Usage Information
When you visit our website, we automatically collect:
- Log data (IP addresses, browser type, access times)
- Pages visited and how you interact with them
- Messages you send us through the chat widget
2.3 Service Data (early access)
If you are granted early access and install our software on your machines, it records network connection metadata so that policies can be enforced and reviewed:
- Destination IP addresses and domain names
- Port numbers and protocols
- Timestamps of connection attempts
- Process names making connections
- For inspected HTTPS traffic, request metadata such as the host, method and path
- Connection status (allowed/blocked) and the policy that decided it
Important: We do NOT store the contents of request or response bodies. Inspection happens on your machine; only the metadata above is sent to the control plane.
We also collect the account details needed to operate the control plane, such as your email address and any identity provider information you use to sign in.
3. How We Use Your Information
We use collected information to:
- Contact you about progress on the Service and early access
- Understand who is interested in the Service and what they need from it
- Provide egress filtering and monitoring to early-access users
- Display network activity in the control plane
- Enforce the security policies you configure
- Improve and optimize the Service
- Detect and prevent security threats or abuse
- Comply with legal obligations
We send waitlist members occasional updates on progress and early access, and nothing else. You can unsubscribe at any time.
4. Data Storage and Security
4.1 Storage
Your data is stored on secure cloud infrastructure with:
- Encryption in transit (TLS 1.3)
- Encryption at rest (AES-256)
- Regular security audits
- Access controls and authentication
4.2 Data Retention
We keep waitlist information until the Service is generally available or you ask us to remove you, whichever comes first. We retain Service data from early access for 90 days by default. Account information is retained while your account is active. You can request deletion of your data at any time.
5. Data Sharing and Disclosure
We do not sell, rent, or share your personal information with third parties except:
- Service Providers: We may share data with trusted service providers who assist in operating our service (cloud infrastructure, email, analytics, chat) under strict confidentiality agreements
- Legal Requirements: We may disclose information if required by law or to protect our rights, safety, or property
- Business Transfers: In the event of a merger or acquisition, your information may be transferred to the new entity
6. Third-Party Services
Website analytics are provided by Mixpanel and the chat widget is provided by Chatwoot. Each of these providers processes data under its own privacy policy. If the Service integrates with an identity or infrastructure provider of yours, we request only the minimum permissions necessary to provide it.
7. Your Rights and Choices
You have the right to:
- Access your personal information
- Correct inaccurate data
- Request deletion of your data, including removal from the waitlist
- Export your data
- Opt-out of non-essential communications
- Withdraw consent for data processing
To exercise these rights, contact us at privacy@bullfrogsec.com
8. Cookies and Tracking
We use analytics cookies to understand how visitors interact with our website, and essential cookies for authentication and session management where the Service requires sign-in. You can control cookie preferences through your browser settings.
9. Children's Privacy
Our service is not intended for users under 13 years of age. We do not knowingly collect information from children under 13.
10. International Data Transfers
Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time, and we expect to do so as the Service moves towards general availability. We will notify you of significant changes via email or through the Service. The "Last updated" date at the top indicates when this policy was last revised.
12. Contact Us
For questions or concerns about this Privacy Policy or our data practices, contact us at:
Email: privacy@bullfrogsec.com
General inquiries: contact@bullfrogsec.com