Privacy Policy

Last updated: May 7, 2026

1. Introduction

This Privacy Policy explains how mediaXtreme LLC ("we," "us," or "our") handles information in connection with the IntelFortes OSINT intelligence platform and the intelfortes.com website. IntelFortes is a self-hosted software product, which means your instance runs on your own infrastructure and we do not have access to the data you collect, store, or analyze.

2. Data Ownership

All data processed, indexed, and stored within your self-hosted IntelFortes instance belongs exclusively to you (the agency, organization, or individual who purchased the license). mediaXtreme LLC has no access to, ownership of, or claim over any data on your installation. You are the sole data controller for your instance.

3. Data Origin & Sourcing

IntelFortes indexes data from third-party public archives, including leaked databases, dark web archives, paste sites, and publicly accessible records. It is important to understand:

  • IntelFortes does not host, store, or distribute original breaches -- it indexes data that is already publicly accessible through third-party archives
  • The Platform acts as a search intermediary, providing structured access to data that exists in the public domain
  • We do not originate, verify, or guarantee the accuracy of any third-party data
  • Data availability may change as original sources are taken down, redacted, or modified
  • Your self-hosted instance stores indexed copies -- you are responsible for the data retention policies on your infrastructure

4. What We Do NOT Collect

Because IntelFortes is a self-hosted application, we do not collect or have access to:

  • Any data indexed, scraped, or stored in your Elasticsearch instance
  • Search queries performed within your IntelFortes dashboard
  • User accounts, credentials, or API keys stored on your server
  • Alert/tracker configurations or notification data
  • Any files, exports, or reports generated by your instance

5. Redaction Portal

IntelFortes maintains a Redaction Portal that enables data subjects to request the removal or masking of their personal information from IntelFortes indexes:

  • Data subjects may submit removal requests through the Redaction Portal at any time
  • Verified requests are processed in accordance with international privacy standards (GDPR, CCPA, and equivalent regulations)
  • Redactions are propagated to all instances receiving updates via the Auto-Update Engine
  • Self-hosted operators are required to honor redaction directives as a condition of their license agreement
  • For removal requests related to a specific self-hosted instance, we will direct the data subject to the instance operator, as we have no access to self-hosted installations

6. Search Activity Logging

Your self-hosted IntelFortes instance includes built-in audit logging that records search activity. This logging serves critical functions:

  • Security -- detecting unauthorized access attempts, suspicious query patterns, and potential abuse
  • Dispute Resolution -- providing evidence of platform usage in the event of billing disputes, chargebacks, or legal inquiries
  • Compliance -- maintaining audit trails required by GDPR, CCPA, and other applicable regulations
  • Operational -- monitoring system performance and identifying optimization opportunities

Search activity logs are stored on your own infrastructure. mediaXtreme LLC does not have access to these logs unless you explicitly share them (e.g., during a support request).

7. IP Address Logging

IntelFortes logs IP addresses at multiple levels for legal compliance and chargeback protection:

  • License verification -- your server's IP is recorded when communicating with our licensing server
  • Purchase transactions -- the IP address used during purchase is recorded alongside the PayPal transaction for fraud prevention and chargeback defense
  • Dashboard access -- your self-hosted instance logs the IP addresses of all users accessing the dashboard (stored on your infrastructure)
  • Website analytics -- standard web analytics on intelfortes.com may record anonymized IP data

IP logs retained by mediaXtreme LLC (licensing and purchase logs) are kept for a minimum of 3 years for legal compliance purposes.

8. Landing Page Analytics

The intelfortes.com marketing website uses standard web analytics to understand visitor traffic. This may include:

  • IP addresses (anonymized where possible)
  • Browser type, device type, and operating system
  • Pages visited, time on site, and referral sources
  • Geographic region (country/city level)

This data is used solely to improve our marketing website and is not linked to your IntelFortes installation in any way.

9. Payment Data

All payment transactions are processed through PayPal. We do not collect, store, or have access to your credit card numbers, bank account details, or other financial information. PayPal's handling of your payment data is governed by PayPal's Privacy Policy. The only payment-related information we retain is your PayPal transaction ID, email address, and associated IP address for order fulfillment, support, and chargeback defense purposes.

10. License Verification

Your IntelFortes installation may communicate with our licensing server to verify your license key and check for updates. This communication transmits only:

  • Your license key
  • Server hardware identifier (for hardware lock verification)
  • Current software version number
  • Server IP address

No user data, search queries, or indexed content is transmitted during license verification.

11. GDPR Compliance Controls

IntelFortes includes built-in GDPR compliance controls for operators in applicable jurisdictions:

  • Data subject search and identification tools
  • Bulk data deletion capabilities
  • Audit logging for all data access events
  • User access controls and permission management
  • Data export functionality for compliance reporting
  • Redaction Portal integration for data subject removal requests

As the data controller for your self-hosted instance, you are responsible for configuring and using these tools in accordance with applicable privacy regulations.

12. Bot Monitoring

The intelfortes.com website employs automated bot detection and monitoring to protect against abuse, scraping, and fraudulent activity. This may involve analyzing request patterns, user-agent strings, and behavioral signals. No personal data is collected beyond what is described in the Landing Page Analytics section above.

13. Third-Party Services

Our marketing website may use the following third-party services:

  • Google Fonts (font delivery)
  • PayPal (payment processing)
  • Lucide Icons (icon delivery via CDN)

Each third-party service operates under its own privacy policy. Your self-hosted IntelFortes instance does not communicate with any third-party service unless you explicitly configure it to do so (e.g., SMTP, proxy services, or API integrations).

14. Data Security

We protect our website and systems using industry-standard security measures including SSL/TLS encryption, secure server configurations, and access controls. For your self-hosted IntelFortes instance, security is your responsibility -- the platform provides JWT authentication, encrypted storage options, and audit logging to help you maintain a secure installation.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of our website or software after changes constitutes acceptance of the revised policy.

16. Contact

For questions about this Privacy Policy, data-related inquiries, or Redaction Portal requests, contact us at:

  • Email: support@intelfortes.com
  • Website: intelfortes.com