Privacy Policy

Effective: 2025-10-10
Entity: iCyberX LLC (“iCyberX”)
Contact: [email protected]

Your privacy matters. This policy explains what information we collect, how we use it, and the choices you have. It applies to our websites, apps, and related services.

1) Scope & Who We Are

This Privacy Policy (“Policy”) describes how iCyberX collects, uses, discloses, and safeguards personal information when you access or use our services. If you do not agree with this Policy, please do not use the services.

2) Information We Collect

We may collect the following categories of information:

  • Account Data — name, email, username, and settings you configure.
  • Usage & Device Data — pages visited, in-app actions (e.g., initiating scans), approximate location derived from IP, device/browser type, OS, and diagnostic logs.
  • Scan Inputs — URLs, files, and related metadata you submit for scanning or analysis.
  • Communications — messages you send us (e.g., support tickets, emails), and your marketing preferences.
  • Payment & Billing — subscription plan, transaction metadata, and limited billing details processed via our payment processor (we do not store full payment-card numbers).
  • Cookies & Similar Tech — identifiers that help us keep you logged in, remember preferences, and measure performance. See Section 5.

3) How We Use Information

We use information to:

  • Provide, operate, and secure the services (including authentication and fraud prevention).
  • Process scans/analyses and deliver results consistent with your plan limits.
  • Improve features, quality, and performance (including troubleshooting and analytics).
  • Communicate service notices, product updates, and policy changes.
  • Enforce our Terms & Conditions, comply with law, and protect our users and platform.

4) Legal Bases (EEA/UK/Switzerland)

Where the GDPR/UK GDPR/Swiss FADP applies, we process personal data on the basis of: (a) performance of a contract (to provide the services); (b) legitimate interests (e.g., security, improvement, anti-fraud); (c) consent (e.g., certain marketing or optional cookies); and (d) legal obligations.

5) Cookies & Similar Technologies

We use:

  • Essential cookies for login, security, and core functionality.
  • Optional cookies for analytics/measurement. Where required by law, we obtain consent via a banner and honor your choices.

You can control cookies through your browser settings. Disabling certain cookies may affect site functionality.

6) “Sale” or “Sharing” of Personal Information

We do not sell personal information and we do not share personal information for cross-context behavioral/targeted advertising as defined by applicable U.S. state privacy laws.

7) Disclosure to Service Providers & Others

We may disclose limited information to vetted third parties that help us operate the services (e.g., hosting, billing, communications, analytics, and computational processing). We provide only what is reasonably necessary, require appropriate confidentiality and security commitments, and do not permit their independent use of your personal information. We may also disclose information to comply with law, protect rights and safety, or in connection with a corporate transaction.

For clarity: we do not list providers by name here.

8) Payment Processing

Payments are processed by our payment processor. We receive tokens/confirmation and basic billing metadata; we do not store full payment-card numbers.

9) International Transfers

Your information may be processed in the United States and other countries. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses) to protect international transfers.

10) Data Retention

We retain personal information for as long as needed to provide the services, comply with legal obligations, resolve disputes, and enforce agreements. Aggregated or de-identified information may be retained longer. Backup copies may persist for a limited period.

11) Security

We implement reasonable and appropriate technical and organizational measures to protect personal information. However, no system is perfectly secure.

Incident Notification. If we become aware of a personal-data breach affecting you, we will notify you without undue delay, consistent with legal obligations and the needs of law enforcement.

12) Your Rights & Choices

Depending on your location, you may have rights to access, correct, delete, or export your personal information; object to or restrict certain processing; and withdraw consent where processing is based on consent. To exercise rights, email [email protected] from your account email with the subject “Privacy Request.” We may request verification of your identity.

Do Not Track. Because there is no common industry standard, our services do not respond to DNT signals.

13) Automated Processing & AI

Our scanning and analysis features involve automated processing of the content you submit to generate risk indicators. Outputs are probabilistic and may be incomplete or incorrect. We do not make decisions with legal or similarly significant effects about you based solely on automated processing. Contact support if you have questions or concerns about a result.

14) Children & Age Restrictions

Our services are intended for individuals 18 years or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor provided information, contact us to request deletion.

15) California & Other U.S. State Notices

Residents of certain U.S. states (e.g., CA, CO, CT, VA, UT) may have additional rights, including to know/access, correct, delete, and obtain portable copies of personal information. We do not sell or share personal information for targeted advertising. We limit the use of any sensitive personal information to permitted purposes. To exercise rights, use the process in Section 12.

16) EEA/UK/Swiss Notices; Representatives; DPA

For EEA/UK/Swiss individuals, iCyberX LLC is the data controller. Where required by Article 27 GDPR/UK GDPR, we will appoint an EU/UK representative for privacy inquiries and provide contact details upon request. A Data Processing Addendum incorporating the EU/UK Standard Contractual Clauses is available on request for qualifying customers.

17) Changes to This Policy

We may update this Policy from time to time. We will post the updated version here and revise the “Effective” date above. Material changes may also be communicated through the service or by email. Your continued use after changes indicates acceptance.

18) Contact

Questions or privacy requests? Contact:
iCyberX LLC
[email protected]
Also see our Terms & Conditions.