Privacy Policy

Last updated: December 19, 2025

This Privacy Policy explains how Cyber Automation Solutions ("Company", "we", "us", or "our") collects, uses, discloses, and safeguards your information when you use our cybersecurity platform and services (the "Service").

By using the Service, you consent to the data practices described in this policy.

1. Information We Collect

Personal Information

We may collect the following personal information when you register for or use the Service:

• Name and contact information (email address, phone number)
• Company name and organization details
• Account credentials (username, encrypted passwords)
• Billing and payment information

Technical and Usage Data

We automatically collect certain information when you use the Service:

• IP addresses and device information
• Browser type, operating system, and language preferences
• Service usage patterns, feature utilization, and access times
• Log files, error reports, and performance data

Security Scan Data

When you use our security scanning and assessment features, we collect data related to your systems, configurations, and vulnerabilities. This data is processed solely to provide the Service and generate security reports.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process security scans and generate vulnerability reports
• Improve and personalize your experience
• Process payments and manage subscriptions
• Send administrative notifications, security alerts, and updates
• Respond to support requests and customer inquiries
• Monitor and analyze usage trends and performance
• Detect and prevent fraud, security incidents, and abuse
• Comply with legal obligations and enforce our Terms of Use

3. How We Share Your Information

We may share your information in the following circumstances:

Service Providers

We may share information with third-party vendors who perform services on our behalf, such as:

• Cloud infrastructure and hosting providers
• Payment processors
• Email and communication service providers
• Analytics and monitoring tools

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or to protect our rights, property, or safety.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

4. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit and at rest (TLS/SSL, AES-256)
• Access controls and authentication mechanisms
• Regular security assessments and audits
• Intrusion detection and monitoring systems
• Employee training and security awareness programs

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Data Retention

We retain your information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When you cancel your subscription, we may retain certain data for backup, archival, audit, or legal purposes.

6. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal obligations)
• Data Portability: Request transfer of your data to another service provider
• Opt-Out: Unsubscribe from marketing communications
• Object: Object to processing of your information for certain purposes

To exercise these rights, please contact us using the information provided at the end of this policy.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Maintain your session and authentication state
• Remember your preferences and settings
• Analyze usage patterns and improve the Service
• Provide personalized content and features

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of the Service.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from your jurisdiction. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

9. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we discover that we have collected information from a child, we will promptly delete it.

10. Third-Party Links and Services

The Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Know what personal information is collected, used, shared, or sold
• Request deletion of your personal information
• Opt-out of the sale of personal information (we do not sell personal information)
• Non-discrimination for exercising your CCPA rights

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, erase, restrict processing, data portability, and object to processing. You also have the right to lodge a complaint with your local data protection authority.

13. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and relevant authorities in accordance with applicable laws and regulations.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: