Cyble's Privacy Notice

Last updated on 2nd September 2026

1. Introduction

Cyble is a cybersecurity company providing threat intelligence and cyber risk management solutions to organizations worldwide.

This Privacy Notice covers Personal Data we collect through our own websites, marketing, sales, and support activities. It does not cover Personal Data that a customer or its users upload to, or generate through their use of, our software and platforms — that is handled under our agreement with the customer and any requests about that data should be directed to the customer, who remains responsible for it.

This Privacy Notice explains how Cyble Inc, together with our subsidiaries and affiliates worldwide, (“Cyble,” “we,” “us,” or the “Company”) collects, uses, discloses, retains, transfers, and protects Personal Data when you interact with our websites, products, platforms, software, subscriptions, support services, threat intelligence services, customer interactions, marketing activities, and related business operations (collectively, the “Services”).

We use cookies and similar technologies to support the functionality, security, performance, and analytics of our website and Services. For more information, please refer to our Cookie Notice at https://cyble.com/cookie-policy/. Where required by applicable law, we will obtain your consent to non-essential cookies through our cookie consent banner before they are set.

Links available through our website may contain links to third-party websites that are not operated by Cyble. This Privacy Notice does not apply to those sites or their privacy practices.

If you believe any information about you contained in such data is inaccurate, please contact us at [email protected].

2. Children’s Personal Data

Cyble does not knowingly collect Personal Data from children under the age required by applicable law.

The website is not intended for use by children below the applicable age threshold. If Cyble becomes aware that it has collected Personal Data from a child contrary to applicable law, such data will be deleted.

If you believe that Personal Data relating to a child has been collected, please contact us at [email protected]

3. Information We Collect and How We Collect It

Data Subject	Mode of Collection	Categories of Personal Data Collected
Customer, Prospective customers	Direct collection from customers and authorized users, prospects	•Contact information and information by which the Customer may be personally identified such as name, postal address, email address, domain name, telephone number, credit card number, employer identification number. Any other information input as part of the online registration process or collected during customer use that is defined as personal data under applicable laws •Information that a customer provides when registering the Software • records of communications with Cyble, such as emails • search queries and results generated through use of the Software; • information provided while reporting issues or requesting support; • information shared with Cyble staff for service support. •Through Cyble personnel via the Customer assisted registration process • Account and authentication information.
Authorized users [Individuals authorized to access the Software.] / Customer	Automatic collection through use of our website	•Software Usage and technical data such as Browsing activity, Search queries and results, Computing environment •Details of use of the website, including pages or features accessed, usage patterns, referring websites or search engines, traffic data, logs, other communication data, and resources accessed through the website. •Details of use of our website (e.g., which portions/features are accessed, usage patterns, referring websites or search engines, traffic data, logs, other communication data, and resources accessed through the website) • Information about the computing environment and internet connection (e.g., IP address, operating system, browser information, software, hardware, and general geographic location). • Account and authentication information.
Other Data Subjects – Individuals identifiable in threat intelligence data / relevant individuals	Indirect collection from third parties	•Information from public sources / open sources, other forums and third-party data providers used for threat intelligence • information from payment and billing intermediaries, such as credit card issuers and clearinghouses (where applicable); • information obtained from data brokers, fraud databases, and referrals from customers or users.
Customers / Billing contacts	Direct collection	•Payment and billing information, where applicable.

Cyble collects and analyses threat intelligence data to support cybersecurity and threat detection activities. Personal Data may be obtained from third-party sources and publicly available sources, including open-source intelligence and, where relevant, dark web sources.

Additional information: We may collect personal information made available by threat actors or other third parties on the dark web or publicly accessible sources through its threat intelligence tools. The categories of data may vary based on the source and threat intelligence purpose.

In limited cases, this may include information relating to identifiable individuals where lawfully accessible and relevant to documented threat intelligence purposes.

Data referenced above that comes from the dark web, open-source intelligence, or a data breach has not been verified by Cyble. We process it only for cybersecurity and threat intelligence purposes, we make no claim as to its accuracy, and we do not verify the identity of the individuals it may relate to. This may in limited cases include sensitive categories of data (such as financial or health information) where it appears in the source material itself.

4. How we use Personal Data

We use Personal Data collected from customers to:

Provide, operate, maintain, and support our website, including responding to inquiries and managing website functionality.

Communicate regarding inquiries, service updates, security notifications, support requests, and website-related changes.

Monitor prospect and customer-provided identifiers, detect potential exposures, generate threat intelligence, and deliver relevant alerts.

Enrich and analyse threat intelligence data related to customer-provided assets, indicators, domains, IP addresses, files, and other data points.

Source, process, and maintain data necessary to support platform operations and threat intelligence services.

Improve the functionality, performance, security, and reliability of our website.

Verify compliance with applicable agreements and manage contractual relationships.

Protect our systems and services, prevent fraud and misuse, respond to security incidents, and comply with legal requirements.

Establish, exercise, or defend legal rights, including in connection with claims, investigations, regulatory matters, data breaches, and data subject requests.

Respond to inquiries and requests submitted through the Software.

Fulfil any other purpose disclosed at the time of collection or permitted by applicable law.

Certain Personal Data may be required to respond to inquiries, provide requested information, or enable specific website functionality. Failure to provide such information may prevent us from fulfilling your request. Providing other Personal Data is optional; however, choosing not to provide it may limit certain features, functionality, or communications. We will indicate when information is mandatory.

5. Lawful Bases for Processing Personal Data

We process your Personal Data by relying on one or more of the following lawful bases:

Lawful Basis	Description
Consent	You have explicitly agreed to/consented to us processing your Personal Data for a specific reason
Contract	The processing is necessary for the performance of the contract/NDA we have with you or to take steps to enter a contract with you
Legal Obligation	The processing is necessary for compliance with a legal obligation we have
Legitimate Interest	The processing is necessary for the purposes of a legitimate interest pursued by us. When we rely on legitimate interests, we assess whether our interests outweigh individual rights

6. Cross-Border Data Transfer

Personal Data we hold about you may be transferred to other countries outside your residential country for any of the purposes described in this Privacy Notice.

Any personal data that we transfer will be protected in accordance with this Privacy Notice as well as with adequate protection in place in compliance with applicable privacy laws which may include safeguards such as the European Commission’s Standard Contractual Clauses or other applicable security safeguards in line with the applicable data protection laws.

Please note that these countries may have differing (and potentially less stringent) privacy laws, and that Personal Data can become subject to the laws and disclosure requirements of such countries, including disclosure to governmental bodies, regulatory agencies and private persons, because of applicable governmental or regulatory inquiry, court order or other similar process.

You may contact us at [email protected] to obtain further information about the safeguards applied or to request a copy of the relevant safeguards which is also available at our Trust portal –https://trust.cyble.com/

7. Sharing and Disclosure of Personal Data

We may disclose aggregated or de-identified information without restriction. We may also share Personal Data:

With our affiliates and subsidiaries.

With service providers that support our business and website , including hosting, data processing, analytics, communication, security, and website support providers. Such providers generally act as data processors and process Personal Data only on our behalf and under contractual obligations.

In connection with a merger, acquisition, reorganization, sale of assets, bankruptcy, or similar corporate transaction.

To fulfil the purpose for which the Personal Data was provided.

With your consent.

We may also disclose Personal Data to:

Comply with applicable laws, regulations, legal processes, or government requests.

Enforce our EULA and other product agreements, including for billing and collections.

Protect the rights, property, security, or safety of Cyble, our customers, or others.

Prevent, investigate, or respond to fraud, security incidents, or other unlawful activities.

Where required by applicable law, you may contact [email protected] to request additional information about the categories of recipients with whom we share Personal Data.

8. Data security

We implement appropriate technical and organizational measures to protect Personal Data against unauthorized access, disclosure, alteration, loss, or destruction. These measures may include secure infrastructure, access controls, firewalls, and encryption technologies such as TLS/SSL, where appropriate.

Additional information about Cyble’s security practices is available at: https://trust.cyble.com/

We maintain processes to detect, manage, and, where required by law, notify relevant authorities and affected individuals of personal data breaches. However, no method of data transmission or storage can be guaranteed to be completely secure. Cyble is not liable for unauthorized access or loss caused by circumstances outside our reasonable control, without limiting any rights you have under mandatory data protection law.

Users are responsible for safeguarding their account credentials and preventing unauthorized access to their accounts.

9. How Long We Retain Personal Data

Data Retention

We retain the personal data we collect only for as long as it is necessary as documented in our Data Retention and Disposal Policy – to fulfil the purposes described in this Privacy Policy, in accordance with our documented data retention schedules, and as required for legal or regulatory obligations.

Retention periods are determined based on:

the nature of personal data,

the purposes for which it is processed,

applicable legal and regulatory requirements, and

the need to resolve disputes or enforce agreements.

Once personal data is no longer required for these purposes, we take reasonable steps to delete it securely or permanently de‑identify it in line with our internal policies.

10. Your Privacy Rights

Subject to the local legal requirements, applicable laws / exceptions, you may have certain rights in relation to your Personal Data. These rights may include:

Right	Description
Right of Access	to request access to your Personal Data and obtain information about how it is processed.
Right to Rectification	to request correction of inaccurate or incomplete Personal Data
Right to Erasure	to request deletion of your Personal Data, subject to applicable conditions.
Right to Restrict Processing	to request restriction of processing in certain circumstances
Right to Data Portability	to receive your Personal Data in a structured format and transfer it to another entity, where applicable
Right to Object	to object to certain types of processing, including processing based on legitimate interests.
Right to Withdraw Consent	where processing is based on consent.
Right to Opt-Out	to opt out of certain processing activities, including where Personal Data is shared or used for specific purposes under applicable law.
Right to Limit Use of Sensitive Personal Data	to request restriction or limitation of the use of certain categories of Personal Data, where applicable
Right to Know	to request information about categories of Personal Data collected, used, or disclosed.
Right to Grievance Redressal	to raise concerns regarding processing of Personal Data and have them addressed in accordance with applicable law.
Right to Object to Automated Decision-Making	to not be subject to a decision based solely on automated processing, including profiling. Cyble does not use Personal Data to make decisions with legal or similarly significant effects on you based solely on automated processing, without human involvement.
Right to Lodge a Complaint	to lodge a complaint with a relevant supervisory or regulatory authority
Right to Nominate	where recognized under applicable law, to nominate another individual to exercise your rights in the event of your death or incapacity

US State Privacy Rights

If you are a resident of California or another U.S. state with applicable privacy laws, you may have rights regarding your Personal Data, including the rights to access, correct, delete, or restrict certain processing of your information. Where applicable, you may also have the right to opt out of the sale or sharing of Personal Data and limit the use of Sensitive Personal Data.

Cyble does not sell Personal Data or share Personal Data for cross-context behavioural advertising. We honor opt-out preference signals, such as the Global Privacy Control, as a valid opt-out request. To exercise your privacy rights, contact us at [email protected]. We will not discriminate against you for exercising these rights.

If you wish to withdraw consent, you can do so through following methods:

By submitting a request through the website portal.

DSRR Request Form: https://cyble.com/dsrr-request-form/

By contacting the Data Protection Officer (DPO) at [email protected]

We process data subject rights requests in accordance with applicable law and may verify your identity before responding.

We will respond within the timeframes required by law. Where permitted, response times may be extended for complex or multiple requests, in which case we will notify you and explain the reason for the extension.

If we are unable to fulfil a request, we will provide the reasons, where required by law, and inform you of any available rights to appeal or lodge a complaint with the relevant supervisory authority.

11. Changes to Cyble’s privacy policy

It is Cyble’s policy to post any changes we make to this Privacy Notice on this page. You are responsible for periodically reviewing this Privacy Notice to check for any changes.

12. Contact information

For any further queries and complaints related to privacy or exercising your rights, you can reach out to us at:

Email	Address
[email protected].	11175 Cicero Drive Suite 100, Alpharetta, GA 30022, United States.