Privacy Policy

CyberShield ("we," "our," or "us") provides AI-powered cybersecurity services for small businesses. This Privacy Policy explains how we collect, use, and protect your information when you use our platform.

1. Information We Collect

Account information: Name, email address, company name, job title, and password (hashed and never stored in plaintext).

Usage data: Security scans run, breach checks performed, training completions, and security scores. This data powers your security dashboard.

Payment information: Processed entirely by Stripe. We never store credit card numbers or full payment details.

Technical data: IP addresses, browser type, and device information collected automatically for security and performance monitoring.

2. How We Use Your Information

• Provide and improve our cybersecurity services
• Send security alerts, breach notifications, and weekly reports
• Process payments and manage your subscription
• Send transactional emails (password reset, email verification)
• Comply with legal obligations

We do not sell your data to third parties. We do not use your data for advertising.

3. Data Sharing

We share your data only with service providers necessary to operate CyberShield:

• Stripe — payment processing
• Supabase — database and authentication infrastructure
• Resend — transactional email delivery
• HaveIBeenPwned — breach checking (email addresses only, no personal data stored by HIBP)
• Anthropic — AI training content generation (no personal data included in prompts)

4. Data Security

We take security seriously. Measures include:

• All passwords hashed using bcrypt with salt rounds
• All data transmitted over HTTPS/TLS
• JWT tokens for authentication, not cookies
• Role-based access controls
• Regular security testing of our own platform

5. Data Retention

We retain your data for as long as your account is active. When you delete your account, we remove your personal data within 30 days. Anonymized usage statistics may be retained indefinitely.

6. Your Rights

• Access: Request a copy of your data
• Correction: Update your profile in Account Settings
• Deletion: Request account deletion via support
• Portability: Export your scan history and security data

7. Cookies

CyberShield uses sessionStorage (not cookies) for authentication. We do not use tracking cookies or advertising pixels.

8. Children's Privacy

CyberShield is a business product and is not intended for individuals under 18. We do not knowingly collect data from minors.

9. Changes to This Policy

We'll notify you by email if we make material changes to this policy. Continued use after changes constitutes acceptance.