CyberAzimut ("CyberAzimut", "we", "our") is committed to protecting the personal data of our customers, prospects and website visitors. This policy explains what we collect, why, how we use it, and the rights you have.
We collect account information you provide (name, work email, company, role), billing details processed by our payment provider, and usage telemetry from the product (logins, pages viewed, scan triggers). We also collect technical telemetry from your external attack surface (publicly resolvable DNS records, open ports, service banners, TLS certificates), which is the subject matter of the service itself. For customers on plans that include manual validation, our analysts may additionally capture notes, screenshots or observations relating to monitored assets; this information is stored and protected with the same measures as automated scan data.
To provide and operate the service, to authenticate users, to send transactional notifications (scan results, alerts), to bill, to detect abuse, and, when you opt in, to send occasional product updates. We do not sell your data, ever.
We share data with a small list of sub-processors that help us run the service: our cloud provider (AWS), our payment processor (Stripe), and our email delivery service (AWS SES). A current list is available on request.
Customer data is stored in AWS region ca-central-1 (Montréal, Canada) by default. We retain account data for as long as you have an active subscription, plus 24 months after termination for audit purposes. Scan history can be purged on request.
Subject to applicable law (GDPR, Québec Law 25, etc.), you have the right to access, correct, port, restrict and delete your personal data. To exercise any of these rights, write to privacy@cyberazimut.com. We respond within 30 days.
All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Production access is MFA-only and audited.
Our site uses strictly necessary cookies for authentication and session management. We use one privacy-friendly analytics provider (no cross-site tracking, no advertising cookies).
We may update this policy from time to time. The "last updated" date above will change accordingly. For material changes we will notify customers by email at least 30 days before the change takes effect.
Questions? Write to privacy@cyberazimut.com.