Privacy Policy
1. Introduction
CYBER AI SECURITY LLC ("Company," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our client portal, or engage our services.
2. Information We Collect
Contact Information: When you fill out our contact form or request a consultation, we collect your name, email address, company name, and any information you provide in your message.
Sample Report Requests: When you request a sample report, we collect your name, email address, and company name. To prevent abuse of the form, we also record a one-way keyed hash of your IP address. We do not store the IP address itself.
Portal Account Information: For client portal users, we collect login credentials (email and password, stored in hashed form), and multi-factor authentication data.
Engagement Data: During active engagements, we may collect and analyze security logs, network data, system configurations, and other technical data as authorized by the client and defined in the engagement scope.
Website Analytics: We use Google Analytics to collect anonymized usage data including pages visited, time on site, browser type, and referring source. This data is used solely to improve our website experience.
3. How We Use Your Information
We use collected information to respond to consultation requests, send sample reports you request and follow up with you about the related service, deliver contracted security services, provide access to the client portal, improve our website and services, and communicate with you about your engagement. We do not sell, rent, or trade your personal information to third parties.
4. AI-Augmented Processing
Our AI-augmented platform processes engagement data to identify security findings, correlate evidence, and generate reports. This processing occurs on secure infrastructure. All AI-generated analysis is reviewed and verified by the founder before inclusion in a client deliverable. Engagement data is used solely for the purpose of delivering contracted services and is not used to train AI models.
4a. Third-Party AI Processing (Anthropic)
Our JARVIS AI assistant and analysis platform are powered by Anthropic's Claude AI technology. When you interact with JARVIS or when our platform performs AI-augmented analysis, the following data may be transmitted to Anthropic for processing:
- User Messages: Text you submit through the JARVIS chat interface on our website, mobile application, or client portal.
- Engagement Context: Relevant engagement metadata, security findings, and scope information necessary to generate accurate security analysis and insights.
Purpose: Data sent to Anthropic is used solely for the purpose of generating security analysis, insights, and recommendations related to your active engagements. It is not used for any other purpose.
Data Retention by Anthropic: We use Anthropic's commercial API under its standard terms. We do not have a zero data retention agreement with Anthropic. Under Anthropic's published policy, API inputs and outputs are automatically deleted from Anthropic's systems within 30 days. Anthropic may keep data longer where required by law, or to enforce its Usage Policy (content flagged as a policy violation may be retained for up to 2 years). Anthropic does not use API data to train its models unless the customer agrees otherwise. See Anthropic's commercial data retention policy for current terms.
Security: All data transmitted to Anthropic is encrypted in transit using TLS. Anthropic maintains SOC 2 Type II compliance and adheres to strict data handling practices. For more information, refer to Anthropic's Privacy Policy.
5. Data Security
We protect your information with HTTPS (TLS 1.2 or higher) in transit, an encrypted server disk, and encrypted backups. Files you upload to the client portal, contact email and phone details, and test credentials are also encrypted by our application. Reports we deliver to you are protected by the encrypted disk and backups, but do not get this extra application-level encryption. Multi-factor authentication is required to sign in to the web client portal. Sign-in from our mobile app also requires MFA. Portal access is role-based, and clients see only their own engagements.
6. Data Retention
Contact form submissions and sample report requests are retained for the duration of the business relationship. Engagement data and deliverables are retained for the period specified in the Master Services Agreement, typically 12 months after engagement completion, unless a longer period is required by law or requested by the client. You may request deletion of your data at any time by contacting us.
7. Third-Party Services
We use the following third-party services: Amazon Web Services (hosting and backups), Cloudflare (network proxy and TLS for our website and portal), Anthropic (AI processing), Twilio SendGrid (email delivery), Stripe (payment processing), Expo (mobile app push notifications, delivered through Apple and Google), Calendly (scheduling calls you book with us), and Google Analytics (website analytics, only if you accept cookies). Each provider maintains its own privacy policy and security practices.
8. Cookies
Our website uses essential cookies for site functionality and analytics cookies through Google Analytics. You can control cookie preferences through your browser settings. The client portal uses session cookies required for authentication and security.
9. Your Rights
You have the right to access the personal information we hold about you, request correction of inaccurate information, request deletion of your information, opt out of marketing communications, and request a copy of your data in a portable format. To exercise any of these rights, contact us at [email protected].
10. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
12. Contact
For questions about this Privacy Policy or our data practices, contact us at [email protected].
← Back to Home