Privacy Policy

Controller: CybSenseSecure (legal entity details pending)
Address: Address to be confirmed - Bulgaria, Bulgaria
Registration: UIC / EIK pending
Contact: billing@cybsensesecure.com

• Account data - email, name (if provided), authentication identifiers (via Clerk)
• Billing data - processed by Stripe (card details are not stored on our servers); we store plan status, customer and subscription IDs
• Usage data - feature usage, IOC lookups, watchlist keywords, dark web scan inputs you submit, cases you create
• Technical data - IP address, browser type, approximate location derived from IP, logs for security and reliability
• API keys you choose to store - third-party keys you enter in Settings to unlock providers
• Communications - support emails you send us

• Provide the Service - contract performance (Art. 6(1)(b))
• Billing and fraud prevention - contract and legitimate interests (Art. 6(1)(b), 6(1)(f))
• Security, abuse prevention, logs - legitimate interests (Art. 6(1)(f))
• Legal obligations - e.g. accounting records (Art. 6(1)(c))
• Product improvement - aggregated / limited analytics under legitimate interests where applicable

We use specialized providers (processors) such as:

• Clerk - authentication
• Stripe - payments and subscriptions
• Vercel - application hosting
• Neon (or configured database host) - application database
• Third-party intel APIs - only when you use features that call them (and with your keys where required)

These providers process data under their terms and appropriate safeguards. Some may process data outside the EEA with Standard Contractual Clauses or equivalent mechanisms.

We retain account and subscription records for as long as your account is active and as required for legal, tax, and dispute purposes afterward. Security logs are retained for a limited period. You may request deletion subject to legal holds.

We apply technical and organizational measures appropriate to the risk (access control, TLS in transit, environment isolation). No method of transmission or storage is 100% secure.

Where GDPR applies, you may have rights to access, rectification, erasure, restriction, portability, and objection, and to lodge a complaint with a supervisory authority (in Bulgaria: Commission for Personal Data Protection). To exercise rights, email billing@cybsensesecure.com.

We use essential cookies and similar technologies required for authentication and security. We do not use third-party advertising cookies by default.

The Service is not directed to children under 16. We do not knowingly collect their data.

We may update this Policy by posting a new version with a revised effective date. Material changes may be highlighted in the product or by email where appropriate.

Privacy questions: billing@cybsensesecure.com