Privacy Policy
Proteum provides security awareness training to businesses ("Customers"). This policy explains what we collect from Customers and their employees ("Learners"), why, and who it is shared with.
Who we are
Proteum LLC ("Proteum"). Contact: jt@proteum.ai.
Information we collect
- Contact details — name, work email address, and mobile phone number, provided by the Customer when they enroll their employees.
- Training activity — modules delivered, opened, and completed; answers to training questions; results of simulated phishing exercises.
- Message delivery data — delivery, open, and reply events returned by our SMS and email providers.
- Basic technical data — IP address, browser type, and timestamps when a Learner opens a training page.
We do not collect payment card numbers, government identifiers, health information, or the contents of a Learner's personal accounts.
How we use it
- To deliver training modules and simulated phishing exercises over SMS and email.
- To personalize the difficulty, topic, and timing of training for each Learner.
- To report aggregate training progress and risk metrics to the employing Customer.
- To operate, secure, and improve the service.
We do not sell personal information, and we do not use Learner data to train third-party AI models.
SMS and mobile information
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing with subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
We do not share, sell, or provide your mobile phone number or messaging consent data to third parties or affiliates for marketing or promotional purposes.
Mobile numbers are used only to deliver the training and simulation messages a Customer has enrolled the Learner in, plus the replies required to service those messages (for example, responding to HELP or STOP). See our Terms and Conditions for message frequency and opt-out instructions. See how we collect that opt-in at proteum.ai/sms-opt-in.
Who we share it with
We share information only with service providers that operate the platform on our behalf, under contract and only for that purpose:
- Twilio — SMS delivery.
- Postmark — email delivery.
- Cloud hosting and storage providers — running the application and its databases.
- AI model providers — generating training content. These receive pseudonymized learner identifiers only; names, email addresses, and phone numbers are never sent to them.
We also share information with the Customer who enrolled the Learner — an employer can see its own employees' training and simulation results. We may disclose information where required by law.
How we protect it
Names, email addresses, and phone numbers are stored encrypted at rest and kept separate from training records, which reference a pseudonymous learner identifier. All traffic is served over TLS. Access is limited to personnel who need it to operate the service.
How long we keep it
We retain Learner data for as long as the Customer's account is active, and delete or anonymize it within 90 days of account termination unless a longer period is required by law.
Your choices
- Text messages — reply STOP to any message to stop them. Reply HELP for help.
- Access, correction, or deletion — email jt@proteum.ai. Because training is arranged by an employer, we may direct a Learner's request to that employer, and we will act on it within 30 days.
Children
The service is for workplace use and is not directed to anyone under 16.
Changes
If we materially change this policy we will update the effective date above and notify Customers by email.
Contact
Questions about this policy: jt@proteum.ai.