This Privacy Policy explains how Cyber Defense Automations LLC ("Company," "we," "us") collects, uses, shares, and protects information when you use Aegis Terminal (the "Service"). It applies to visitors, registered users, and API users.
When you register, we collect your name, email address, password (stored as a salted hash, never in plain text), and organization name if applicable.
When you use an agent, we process the data you submit for analysis. Depending on which agent you use, this may include: IP addresses, URLs, file hashes, domain names, email addresses, passwords (checked using a privacy-preserving method described below), phone numbers, and log files you upload. We retain a history of your queries and the results returned so you can review past investigations.
Paid subscriptions are processed by Stripe. We do not store your full payment card number; Stripe handles and stores that information under its own privacy and security practices.
We automatically log standard technical data such as IP address, browser type, and access timestamps for security and diagnostic purposes.
To power certain agents, we transmit relevant portions of your query to specialized third-party threat-intelligence and data-verification providers (for example, malware-scanning databases, breach-notification databases, and IP/phone reputation networks). These providers process the specific data point you submit (such as an IP address or phone number) in order to return a result to our Service. We select providers based on industry-standard security and compliance practices.
Password checks are privacy-preserving by design. When you check a password for breach exposure, we never transmit or store your actual password. Instead, we use a k-anonymity method: only the first five characters of a cryptographic hash of your password are sent to the breach-checking provider, which is not enough information for anyone to reverse-engineer your actual password.
We do not sell your personal information. We do not use your query data to train third-party AI models outside of the Service's own operation.
We retain account information for as long as your account is active. Query history is retained according to your plan's stated retention window (see our Pricing page for current retention periods by plan). You may request deletion of your account and associated data at any time, subject to Section 8 below.
You may access, correct, or request deletion of your account information at any time through your account settings or by contacting us.
If you are a California resident, you have the right to know what personal information we collect, request deletion of your personal information, correct inaccurate information, and opt out of the sale or sharing of personal information. We do not sell personal information. To exercise these rights, contact us at the email below.
If you are located in the European Economic Area or United Kingdom, you have the right to access, rectify, erase, restrict, or port your personal data, and to object to certain processing. Our legal basis for processing is generally your consent (upon registration) and our legitimate interest in operating the Service. You may lodge a complaint with your local data protection authority.
We use industry-standard safeguards including encrypted password storage, encrypted connections (HTTPS/TLS), and access controls to protect your information. No system is completely secure, and we cannot guarantee absolute security.
You may delete your account through your account settings. Deletion removes your access and personal profile information; some query logs may be retained for a limited period as required for fraud prevention, security auditing, or legal compliance, after which they are permanently deleted.
The Service is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us so we can delete it.
Our servers and third-party providers may be located outside your country of residence, including in the United States. By using the Service, you consent to the transfer of your information to these locations, which may have different data protection laws than your home jurisdiction.
We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date.
For privacy questions or to exercise your rights, contact us at contact@cyberdefenseautomations.com.