Privacy Policy

We collect information you provide directly to us, information collected automatically when you use our services, and information from the systems you connect to CyberPlug.

• Account and contact details: name, work email, company, and role.
• Demo and enquiry information: anything you submit when you request a demo or contact us.
• Usage data: log data, device and browser information, and how you interact with our website and platform.
• Connected-system data: read-only configuration and evidence data pulled from the cloud, identity, and security tools you choose to integrate.

We use the information we collect to operate, maintain, and improve CyberPlug, and to communicate with you.

• Provide the platform, map your controls, and generate compliance evidence.
• Respond to demo requests, support enquiries, and other communications.
• Monitor, secure, and improve our services.
• Comply with legal obligations and enforce our agreements.

Where the GDPR or similar laws apply, we rely on the following legal bases: performance of a contract with you, your consent, our legitimate interests in operating and improving our services, and compliance with legal obligations.

We do not sell your personal data. We share information only as needed to run our services or as required by law.

• Service providers who process data on our behalf under contract (for example, hosting and infrastructure).
• Professional advisers, auditors, and authorities where required by law.
• In connection with a merger, acquisition, or sale of assets, subject to this policy.

Security is core to what we do. Integrations are scoped to read-only, least-privilege access, data is encrypted in transit and at rest, and we collect only what is needed to assess your controls. No method of transmission or storage is completely secure, but we work to protect your information using industry-standard safeguards.

We retain personal data for as long as needed to provide our services, comply with our legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymise it.

We may process and store information in countries other than where you are located. Where we transfer personal data internationally, we use appropriate safeguards consistent with applicable law.

Depending on your location, you may have rights to access, correct, delete, or port your personal data, and to object to or restrict certain processing. To exercise these rights, contact us using the details below.

We use cookies and similar technologies to run the website, remember your preferences (such as light or dark theme), and understand how our site is used. You can control cookies through your browser settings.

CyberPlug is a business product and is not directed to children. We do not knowingly collect personal data from anyone under the age of 16.

We may update this Privacy Policy from time to time. When we make material changes, we will update the date above and, where appropriate, notify you.

If you have questions about this Privacy Policy or how we handle your data, contact us at admin@cyberplug.cc.