Last updated:  February 18th, 2019

Purpose: Cymatic Security Inc. (Cymatic) enables the users of its platform and its components to be in control of their personal data. We also provide controls that allow Cymatic’s users/customers to have control over the privacy of personal data that is captured by our service. This Privacy Policy provides information about how Cymatic processes and protects this data.

Scope: This statement applies to Cymatic Security’s website, platform and signal processors.

Responsibility for Processing Personal Data

Cymatic considers data protection and privacy to be of paramount importance. We never sell personal data and we carry out all processing operations in strict compliance with the EU General Data Protection Regulation (“GDPR”) (specifically but not limited to Article 6(1)(b) to (f) and Article 28).  

For the purpose of this Privacy Policy, personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (the “Personal Data”).

Cymatic bears responsibility for lawfully processing your data as carried out on our site.  We will collect personal identifiable information only if you voluntarily give us consent.

When you use our software, we only capture the necessary information to identify who you are and understand the risks and threats associated with the information that is provided. We use this information in various ways to protect your online identity.  We only capture and store truncated versions of this information. It is captured and stored in an anonymized format by obfuscating pieces of it before it reaches our servers. Any processing where the raw data is needed (for example password strength) is done at the client and the result is sent back to our servers for analysis.  

The data we collect includes:

  • Email Address: We only need your email address to register for our service, as well as for correspondence related to your use of our service.  
  • Location: We collect your location using the IP information captured by our software.  We use this information to know where you have been, identify you and determine the risks that location presents.
  • Behavioral Aspects: We analyze how you type (not what you type), how you move your mouse and your browsing activities and use them to identify you.  
  • Device information: We collect your device specific information, which includes but is not limited to your browser information, language, screen resolution, access times and operating system.

Data Security

To protect users from data compromise, Cymatic takes every effort to ensure any PII collected is stored anonymized, obfuscated, hashed and/or encrypted. Behavioral data is processed on the end-users device or in cache and erased after processing is done.  Cymatic only stores the anonymized and truncated result for future comparisons.  Other static data, such as usernames, passwords, device information, location and email addresses are obfuscated, hashed and encrypted.  For more information on our data security practices, please contact us at [email protected] 

Cookies

Cymatic uses cookies to process information including standard internet log information and details of the visitor’s behavioral patterns upon visiting our site. This is done to provide you with a better experience, and to facilitate the use of certain functions. Cookies are small data files transferred onto computers or devices by sites for record-keeping purposes and to enhance functionality on our site. Cymatic stores this information in a pseudonymized user profile. Cymatic does not process this information to identify individual users or to match it with further data on an individual user.

Cookies are stored on your individual device and you have full control over their use. You may deactivate or restrict the transmission of cookies by changing the settings of your web browser. Cookies that are already stored may be deleted at any time. Should you visit Cymatic’s site with cookies deactivated, you may possibly not be able to use all of the functions on our site to the full extent.

Contact with us via email

On our site you have the opportunity to contact us to ask us questions, for example via a contact form, we ask you for your contact information (e.g. name, email address etc.). We use this data solely in connection with answering the queries we receive.

If you receive emails from us, we may use certain analytics tools, to capture data such as when you open our email or click on any links or banners our email contains. This data helps us to gauge the effectiveness of our communications and marketing campaigns.

Your Cymatic Account

When you sign up for and open an account with Cymatic, or sign up for content or offers, we may ask you to provide us with information such as your name, email address and details about your organization. As otherwise detailed in this Privacy Policy, we will solely process this information to provide you with the service you signed up for. Please refer to our Terms of Service for further details on registering and using the services offered by Cymatic.

You may deactivate your Cymatic account and/or unsubscribe from receiving content or offers from us at any time. Following termination of your account, we may retain your personal data (in part or in whole) in order to meet any regulatory and reporting requirements for the timeframes stipulated by law and in order to be able to address customer service issues. Any other personal data we would have been processing on your behalf would be deleted permanently within 30 calendar days.

Access and Disclosure to Third Parties

We use a select number of trusted external service providers for certain technical data analysis, processing and/or storage offerings. These service providers are carefully selected and meet high data protection and security standards. We only share information with them that is required for the services offered  and we contractually bind them to keep any information we share with them as confidential and to process Personal Data only according to our instructions.

We will only pass your data on to third parties without your express consent if we are obliged to do so by statutory law or an instruction by a public authority or court as outlined in our Terms of Service.

Communication

We may occasionally send you notification emails about updates to our product, legal documents, offer customer support or marketing emails. Except for cases where we are required to do so by law (e.g. notifying you of a data breach), you shall have the opportunity to unsubscribe from receiving these messages free of charge.

Your Data, Your Rights

You have a right to be informed of Personal Data processed by Cymatic, a right to rectification/correction, erasure and restriction of processing. You also have the right to receive from Cymatic a structured, common and machine-readable format of Personal Data you provided to us.

We can only identify you via your email address and we can only adhere to your request and provide information if we have Personal Data about you through you having made contact with us directly and/or you using our site and/or service. We cannot provide, rectify or delete any data that we store on behalf of our users or customers.

To exercise any of the rights mentioned in this Privacy Policy and/or in the event of questions or comments relating to the use of Personal Data you may contact Cymatic’s support team: [email protected]

Where you have provided consent, you may withdraw it at any time, without affecting the lawfulness of the processing that was carried out prior to withdrawing it. Whenever you withdraw consent, you acknowledge and accept that this may have a negative influence on the quality of the Cymatic Site and/or Services. You further agree that Cymatic shall not be held liable with respect to any loss and/or damage to your Personal Data if you choose to withdraw consent.

Where Personal Data is processed for the above purposes on the basis of Cymatic’s legitimate interests, under the GDPR, you may object to such processing at any time. To do so please contact: [email protected].

Duration of Processing

We will store your usage data until such time when you withdraw your consent for us to do so. All other data as specified above will be retained for as long as is necessary for the purpose(s) for which we originally collected it. We may also retain information as required by law.

Children

Children under 13 are not allowed to use our service without parents’ supervision. Parents are encouraged to educate children under 13 not to provide any personal information online. If you find that your child is providing personal information to us without your permission, please contact us to delete the data.

Revisions to this Privacy Policy

We may revise this Privacy Policy from time to time. The most current version of this Privacy Policy will govern our practices for collecting, processing, and disclosing personal data. We will provide notice of any modifications by posting a written notice on our site.

If you have an account with us, we will notify you of any material modifications by sending you an email to the email address associated with your account unless you have unsubscribed from all email communications. Your use of the site and/or Services following the effective date of any modifications to the Privacy Policy will constitute your acceptance of the Privacy Policy, as modified. All changes to this Privacy Policy automatically take effect on the sooner of the day you use the site and/or services, or 30 calendar days after they are initially posted on our site. Your use of the site and/or services following the effective date of any modifications to this Privacy Policy will constitute your acceptance of the Privacy Policy, as modified.

How to Reach Us

Any feedback or questions about our privacy policy, please email us at [email protected]