Rapid7 Terms Scorecard

Grade A+ — Highly protective (score 97/100)

Rapid7 maintains a highly protective privacy policy, explicitly pledging not to sell personal data and providing clear mechanisms for data access, correction, and deletion.

Strong privacy protections with clear opt-outs and no data sale pledge.

Terms at a glance

Sells your data
NO
Forced arbitration
UNCLEAR
Trains AI on your content
NO
Collects biometric data
NO
Shares data with government
YES
Easy to cancel
YES
Tells you before changes
YES
Deletes data on request
YES

What the terms actually say

Right to Opt-Out of Sale or Sharing of Personal Information

We do not sell your personal information for monetary consideration.

The company does not sell your personal data for money, which is a strong protective stance.

HOW WE WILL NOTIFY YOU OF CHANGES TO THIS POLICY?

If we make any change in how we use your personal information we will take steps to notify you, which may include notifying you by email ... or by means of a notice on this site prior to the change becoming effective.

The company promises to provide advance notice of material changes to their privacy practices.

FOR LEGAL PURPOSES

We may share personal information with companies, organizations, or individuals outside of Rapid7 if we have a good-faith belief that access, use, preservation, or disclosure of the information is reasonably necessary to ... Meet any applicable law, regulation, legal process, or enforceable governmental request.

The company reserves the right to share your data with government authorities if they deem it necessary for legal compliance.

REQUESTING DELETION OF YOUR INFORMATION

To request deletion of your personal information, you may submit a request through our secure Data Deletion Request Form.

You have a clear, self-serve online method to request the deletion of your personal data.

Last reviewed 2026-08-01 under rubric v3.5.

Other scorecards