Effective 28 August 2026

1. Scope of this notice

This notice applies to the public website at tunnelmessenger.com and to correspondence you send us through it.

It does not govern the operation of a Tunnel platform deployment. Where an organization deploys Tunnel, the handling of that organization's data is governed by the written agreement between the organization and the operator of Tunnel Sovereign, and, in a sovereign deployment, by the organization's own policies applied to infrastructure it operates itself.

Individuals using a Tunnel service that was previously provisioned to them remain subject to the service terms and privacy notice supplied at the time of provisioning.

2. Information collected through this website

2.1 Information you provide

If you submit a briefing request, we collect the information in that form: your name, organization, title or role, work email address, country, area of interest. Where you choose to provide them, it also collects deployment interest, estimated organization or program scope, and the message you write.

Please do not submit classified information, operational secrets, credentials or other sensitive material through this website. The briefing form is an ordinary business inquiry channel and is not a secure communication service.

2.2 Information collected automatically

The web server that serves this site records ordinary request information as part of operating and securing the service. That includes the requesting IP address, the requested path, the time of the request, the response status and the user-agent string.

This website does not use advertising cookies, analytics cookies, tracking pixels, third-party analytics services, session-replay tools, IP-geolocation services or third-party avatar services. Fonts are served from this site rather than from a third-party font provider.

3. Why the information is used

To respond to your inquiry and arrange the briefing or discussion you requested.
To maintain a record of business correspondence.
To operate, secure and troubleshoot the website, including limiting abuse of the inquiry form.
To meet legal or regulatory obligations that apply to us.

We do not sell information collected through this website, and we do not share it for anyone else's marketing purposes.

4. How inquiries are delivered

A submitted briefing request is delivered to a Tunnel Sovereign mailbox by authenticated email, and, where the deployment is configured for it, to an internal system operated by Tunnel Sovereign. No third-party form-forwarding service sits in that path.

If delivery fails, the website tells you so and gives you a direct email address, so that an inquiry is never reported as received when it was not.

5. Service providers

We use a small number of providers to operate this website and business correspondence: infrastructure hosting, email delivery and email hosting. They act on our instructions, and we do not grant them rights to use your information for their own purposes.

6. Retention

Business correspondence, including briefing requests, is retained for as long as needed for the business relationship or prospective relationship, and thereafter for the period required to meet our legal and record-keeping obligations. Server request logs are retained only for as long as they are needed to operate and secure the website, and are then deleted or aggregated.

7. Security

The website is served over TLS. Inquiry data in transit between your browser and our infrastructure is encrypted, and onward delivery to our mailbox uses authenticated, encrypted transport. Access to correspondence is limited to personnel who need it.

8. International transfer

Tunnel Sovereign is operated from the United States, and information you send through this website may be processed there. Where an organization requires that operational data remain within a particular jurisdiction, that is a deployment question and is addressed in the deployment agreement, including through sovereign deployment, where the organization operates the infrastructure itself.

9. Your rights

Depending on where you are located, you may have rights to request access to the personal information we hold about you, to have it corrected or deleted, to object to or restrict certain processing, and to receive a copy of it. To exercise a right, write to enterprise@tunnelmessenger.com. We may need to verify your identity before acting on a request.

10. Children

This website is directed at organizations and their representatives. It is not directed at children, and we do not knowingly collect information from them.

11. Changes

If this notice changes materially, the effective date above will be updated and the revised notice published here.

12. Contact

Privacy inquiries: enterprise@tunnelmessenger.com
Security reports: security@tunnelmessenger.com
Legal: enterprise@tunnelmessenger.com