Privacy Policy

Cybrove ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our platform at cybrove.com.

Information We Collect

Account Information

When you create an account, we collect your name, email address, company name, and password (stored as a bcrypt hash). If you subscribe to a paid plan, payment information is processed by our billing partner Polar. We do not store credit card numbers.

Scan Data

When you run security scans, we collect and store the scan results, including discovered assets, vulnerabilities, configurations, and scores. This data is essential to providing the service and is stored within your organization's isolated tenant.

Usage Analytics

We collect anonymized usage data including pages visited, features used, and scan frequency to improve the platform. We do not sell this data to third parties.

How We Use Your Data

We use your information to: provide and improve the Cybrove platform, generate security reports and scores, send scan notifications and product updates, provide customer support, and detect and prevent abuse of the platform.

How We Protect Your Data

All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). We implement role-based access controls, row-level security for tenant isolation, and maintain comprehensive audit logs. Our infrastructure runs on Kubernetes with automated security patching.

Data Retention

Scan data is retained according to your plan: 30 days (Launch), 90 days (Grow), 1 year (Scale), or custom (Enterprise). Account data is retained until you delete your account. You can request data deletion at any time.

Third-Party Processors

We use the following third-party services: Polar (payment processing), cloud infrastructure providers for hosting, and email delivery services for notifications. Each processor is bound by data processing agreements.

Your Rights

You have the right to: access your personal data, request correction of inaccurate data, request deletion of your data, export your data in a portable format, and opt out of marketing communications. To exercise these rights, contact us at privacy@cybrove.com.

Contact

For privacy questions or concerns, contact us at privacy@cybrove.com.