SECURITY & COMPLIANCE GOVERNANCE
Privacy Policy
LAST REVISED: October 31, 2026 // VER: 2.6
## 1. Information We Collect
CyberThreads ("we", "our", or "us") provides cybersecurity services, vulnerability assessments, penetration testing, and security consulting. We are committed to safeguarding the confidentiality and integrity of your information.
When you interact with our website or engage our security services, we may collect:
- **Contact Details**: Name, corporate email address, organization name, and technical contact details provided when requesting assessments or subscribing to our threat intelligence updates.
- **Engagement Data**: Systems scope, IP ranges, domain names, and technical specifications explicitly provided for authorized security evaluations under mutually executed Rules of Engagement (RoE).
- **Telemetry & Logs**: Minimal server log data including IP addresses, browser user-agents, and access timestamps strictly for security verification, anti-abuse, and rate limiting.
## 2. Use of Information
We utilize gathered information exclusively to:
- Coordinate, scope, and execute authorized cybersecurity assessments;
- Deliver confidential technical vulnerability findings and remediation guidance;
- Transmit requested security advisories and threat bulletins;
- Protect our infrastructure and services against unauthorized access, malicious probes, and automated attacks;
- Comply with applicable legal, regulatory, and professional ethical standards.
## 3. Strict Confidentiality & Data Security
All technical data, penetration test results, vulnerability discoveries, and architecture diagrams are classified as **Top Secret / Client Confidential**. We enforce strict defense-in-depth protections:
- End-to-end cryptographic protection for data in transit (TLS 1.3) and at rest (AES-256);
- Least-privilege role-based access control (RBAC) and mandatory hardware-backed multi-factor authentication for all security personnel;
- Secure, air-gapped cryptographic deletion of sensitive assessment payloads upon engagement completion in accordance with data retention schedules.
## 4. No Third-Party Selling
We never sell, rent, monetize, or disclose your personal or technical data to third-party marketers or advertisers under any circumstances.
## 5. Your Rights
Under applicable data privacy regulations (including GDPR and CCPA), you possess the right to request access to, correction of, or permanent erasure of your personal contact records. To exercise these rights, contact defense@cyberthreads.io.
CyberThreads ("we", "our", or "us") provides cybersecurity services, vulnerability assessments, penetration testing, and security consulting. We are committed to safeguarding the confidentiality and integrity of your information.
When you interact with our website or engage our security services, we may collect:
- **Contact Details**: Name, corporate email address, organization name, and technical contact details provided when requesting assessments or subscribing to our threat intelligence updates.
- **Engagement Data**: Systems scope, IP ranges, domain names, and technical specifications explicitly provided for authorized security evaluations under mutually executed Rules of Engagement (RoE).
- **Telemetry & Logs**: Minimal server log data including IP addresses, browser user-agents, and access timestamps strictly for security verification, anti-abuse, and rate limiting.
## 2. Use of Information
We utilize gathered information exclusively to:
- Coordinate, scope, and execute authorized cybersecurity assessments;
- Deliver confidential technical vulnerability findings and remediation guidance;
- Transmit requested security advisories and threat bulletins;
- Protect our infrastructure and services against unauthorized access, malicious probes, and automated attacks;
- Comply with applicable legal, regulatory, and professional ethical standards.
## 3. Strict Confidentiality & Data Security
All technical data, penetration test results, vulnerability discoveries, and architecture diagrams are classified as **Top Secret / Client Confidential**. We enforce strict defense-in-depth protections:
- End-to-end cryptographic protection for data in transit (TLS 1.3) and at rest (AES-256);
- Least-privilege role-based access control (RBAC) and mandatory hardware-backed multi-factor authentication for all security personnel;
- Secure, air-gapped cryptographic deletion of sensitive assessment payloads upon engagement completion in accordance with data retention schedules.
## 4. No Third-Party Selling
We never sell, rent, monetize, or disclose your personal or technical data to third-party marketers or advertisers under any circumstances.
## 5. Your Rights
Under applicable data privacy regulations (including GDPR and CCPA), you possess the right to request access to, correction of, or permanent erasure of your personal contact records. To exercise these rights, contact defense@cyberthreads.io.
CYBERTHREADS LEGAL COUNSEL
defense@cyberthreads.pro