Privacy Policy

Cerulean Shield ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, company name, and password when you create an account.
• Payment Information: Billing address and payment details processed securely through our payment providers.
• Communications: Information you provide when you contact us for support or inquiries.

1.2 Information Collected Automatically

• Device Information: For our security services, we collect device identifiers, operating system information, and security-relevant system data.
• Usage Data: Information about how you use our platform, including features accessed and actions taken.
• Security Data: Threat detection data, security scan results, and remediation actions taken on protected devices.

1.3 Information from Third Parties

• Identity Verification Providers: Information received from third-party identity verification services used during account creation or compliance checks.
• Threat Intelligence Feeds: Aggregated threat data from industry partners used to enhance our security services.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our security and automation services
• Detect, prevent, and respond to security threats on your protected devices
• Process transactions and send related information
• Send technical notices, updates, and support messages
• Respond to your comments, questions, and customer service requests
• Develop new products, services, features, and functionality
• Generate anonymized, aggregated threat intelligence data

3. Data Sharing and Disclosure

We do not sell your personal information. We may share information in the following circumstances:

• Service Providers: With third-party vendors who assist in providing our services (hosting, payment processing, customer support).
• Legal Requirements: When required by law or to respond to legal process.
• Protection of Rights: To protect the rights, property, or safety of Cerulean Shield, our users, or others.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.

4. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data at rest (AES-256) and in transit (TLS 1.3)
• Regular security assessments and penetration testing
• Access controls and authentication requirements
• Employee security training and background checks
• SOC 2 Type II certified infrastructure

5. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Security scan data and threat logs are retained for 90 days by default, with options to extend retention for compliance purposes.

6. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your personal information
• Export your data in a portable format
• Opt out of certain data processing activities

To exercise these rights, please contact us at privacy@ceruleanshield.com.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

8. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or sending you an email.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at:

• Email: privacy@ceruleanshield.com
• Address: Cerulean Shield, Sydney, Australia