Privacy Policy

Cyvatar, Inc. ("Cyvatar," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard information about you when you visit our websites, use our services, or interact with us. Please read this policy carefully. If you do not agree with its terms, please discontinue use of our sites and services.

This policy applies to information we collect from: employees, job applicants, and contractors; customers and users of our managed cybersecurity services; and visitors to our websites and digital properties.

1. Information We Collect

We may collect the following categories of information:

• Contact and identity information — name, email address, phone number, company name, job title
• Account credentials — username and password information when you create an account
• Browser and device information — IP address, browser type, operating system, device identifiers, and referring URLs
• Server log file information — pages visited, time spent, links clicked, and other usage data
• Information collected through cookies — session data, preferences, and analytics information (see Cookies section below)
• Communications — messages, emails, and other correspondence you send us
• Payment information — billing address and payment method details (processed by our PCI-compliant payment processors; we do not store full card numbers)
• Employment information — for applicants and employees, resume, work history, and related information

We collect information directly from you, automatically through your use of our services, and from third parties such as analytics providers, advertising networks, and business partners.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Providing, operating, and improving our cybersecurity services
• Customer and user administration, including processing orders, inquiries, and client reporting
• Data storage and administration
• Communicating with you about your account, service updates, and security alerts
• Advertising, marketing, and public relations activities (where you have not opted out)
• Analyzing usage patterns to improve our websites and services
• Complying with legal obligations and enforcing our agreements
• Protecting the security and integrity of our services and users
• Processing job applications and managing employment relationships

We process your information based on your consent, the performance of a contract with you, our legitimate business interests, or compliance with legal obligations.

3. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to operate and improve our services. The cookies we use include:

• cookie_banner_closed — remembers whether you have acknowledged our cookie notice
• secure_cookie — maintains your authenticated session securely
• pst_*, pref, sess — store your preferences and session state

We also use Google Analytics to understand how visitors use our sites. Google Analytics collects information such as how often users visit our site, what pages they visit, and what other sites they used prior to coming to our site. We use this information only to improve our sites and services.

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on. You may also configure your browser to reject cookies; however, doing so may limit your ability to use certain features of our services.

4. Sharing Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service providers — with group companies, agents, contractors, or vendors who assist in delivering our services (such as cloud hosting, payment processing, email delivery, and analytics), subject to confidentiality obligations
• Legal requirements — when required by law, regulation, legal process, or governmental request
• Protection of rights — to protect the rights, property, or safety of Cyvatar, our customers, or others
• Business transfers — in connection with a merger, acquisition, financing, or sale of all or a portion of our assets
• With your consent — in any other circumstances where you have provided consent

5. Data Security

We implement reasonable and appropriate organizational, technical, and administrative measures to protect the information we collect against unauthorized access, disclosure, alteration, and destruction. These measures include encryption in transit and at rest, access controls, and regular security assessments.

However, no security program is impenetrable. While we work to protect your information, we cannot guarantee that unauthorized third parties will never be able to defeat our security measures. You are responsible for maintaining the security of your account credentials.

If you believe your information has been compromised, please contact us immediately at security@cyvatar.ai.

6. Data Retention

We retain your information for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. When determining retention periods, we consider the amount and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, and applicable legal requirements.

When information is no longer needed, we securely delete or anonymize it.

7. Your Rights & Choices

Depending on your location, you may have the following rights with respect to your personal information:

• Access — request a copy of the personal information we hold about you
• Correction — request that we correct inaccurate or incomplete information
• Deletion — request that we delete your personal information, subject to certain exceptions
• Objection — object to our processing of your information based on legitimate interests
• Restriction — request that we restrict how we process your information in certain circumstances
• Portability — receive your information in a structured, machine-readable format
• Withdraw consent — where processing is based on consent, withdraw that consent at any time

Marketing opt-out: You may opt out of marketing communications at any time by clicking "unsubscribe" in any marketing email, or by contacting us at privacy@cyvatar.ai. Opting out of marketing does not affect our ability to send you service-related communications.

To exercise any of these rights, please contact us using the information in the Contact section below. We will respond to your request within the timeframe required by applicable law.

8. Children's Privacy

Our services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete that information promptly. If you believe we have inadvertently collected such information, please contact us immediately.

9. International Data Transfers

Cyvatar is based in the United States. If you are accessing our services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or other countries where our servers and service providers are located. By using our services, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection rules.

Where required, we implement appropriate safeguards for international data transfers in accordance with applicable law.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last Modified" date at the top of this page. For material changes, we may provide additional notice such as a banner on our website or an email notification.

We encourage you to review this policy periodically to stay informed about how we are protecting your information.

11. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have a concern about how we handle your data, please contact us: