Effective: 2025-10-10
Entity: iCyberX LLC (“iCyberX”)
Contact: [email protected]
Your privacy matters. This policy explains what information we collect, how we use it, and the choices you have. It applies to our websites, apps, and related services.
This Privacy Policy (“Policy”) describes how iCyberX collects, uses, discloses, and safeguards personal information when you access or use our services. If you do not agree with this Policy, please do not use the services.
We may collect the following categories of information:
We use information to:
Where the GDPR/UK GDPR/Swiss FADP applies, we process personal data on the basis of: (a) performance of a contract (to provide the services); (b) legitimate interests (e.g., security, improvement, anti-fraud); (c) consent (e.g., certain marketing or optional cookies); and (d) legal obligations.
We use:
You can control cookies through your browser settings. Disabling certain cookies may affect site functionality.
We do not sell personal information and we do not share personal information for cross-context behavioral/targeted advertising as defined by applicable U.S. state privacy laws.
We may disclose limited information to vetted third parties that help us operate the services (e.g., hosting, billing, communications, analytics, and computational processing). We provide only what is reasonably necessary, require appropriate confidentiality and security commitments, and do not permit their independent use of your personal information. We may also disclose information to comply with law, protect rights and safety, or in connection with a corporate transaction.
For clarity: we do not list providers by name here.
Payments are processed by our payment processor. We receive tokens/confirmation and basic billing metadata; we do not store full payment-card numbers.
Your information may be processed in the United States and other countries. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses) to protect international transfers.
We retain personal information for as long as needed to provide the services, comply with legal obligations, resolve disputes, and enforce agreements. Aggregated or de-identified information may be retained longer. Backup copies may persist for a limited period.
We implement reasonable and appropriate technical and organizational measures to protect personal information. However, no system is perfectly secure.
Incident Notification. If we become aware of a personal-data breach affecting you, we will notify you without undue delay, consistent with legal obligations and the needs of law enforcement.
Depending on your location, you may have rights to access, correct, delete, or export your personal information; object to or restrict certain processing; and withdraw consent where processing is based on consent. To exercise rights, email [email protected] from your account email with the subject “Privacy Request.” We may request verification of your identity.
Do Not Track. Because there is no common industry standard, our services do not respond to DNT signals.
Our scanning and analysis features involve automated processing of the content you submit to generate risk indicators. Outputs are probabilistic and may be incomplete or incorrect. We do not make decisions with legal or similarly significant effects about you based solely on automated processing. Contact support if you have questions or concerns about a result.
Our services are intended for individuals 18 years or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor provided information, contact us to request deletion.
Residents of certain U.S. states (e.g., CA, CO, CT, VA, UT) may have additional rights, including to know/access, correct, delete, and obtain portable copies of personal information. We do not sell or share personal information for targeted advertising. We limit the use of any sensitive personal information to permitted purposes. To exercise rights, use the process in Section 12.
For EEA/UK/Swiss individuals, iCyberX LLC is the data controller. Where required by Article 27 GDPR/UK GDPR, we will appoint an EU/UK representative for privacy inquiries and provide contact details upon request. A Data Processing Addendum incorporating the EU/UK Standard Contractual Clauses is available on request for qualifying customers.
We may update this Policy from time to time. We will post the updated version here and revise the “Effective” date above. Material changes may also be communicated through the service or by email. Your continued use after changes indicates acceptance.
Questions or privacy requests? Contact:
iCyberX LLC
[email protected]
Also see our Terms & Conditions.