Scope
This Privacy Policy explains how 901Cyber Security collects, uses, discloses, and protects personal information through websites that link to this Policy and through our sales, marketing, recruiting, and business communications.
When 901Cyber processes security telemetry or other personal information on behalf of a customer, the applicable customer agreement governs that processing. The customer generally determines why and how that information is processed and should address requests from its users or personnel.
Information we collect
The information we collect depends on how you interact with us and may include:
- Contact and business information, such as your name, work email, telephone number, job title, employer, and message content.
- Communications, event registrations, meeting details, support requests, survey responses, and other information you choose to provide.
- Website and device information, such as IP address, browser type, operating system, referring page, pages visited, timestamps, approximate location, and security logs.
- Customer and service information provided under an agreement, including account details, authorized users, configuration data, security telemetry, and incident-related information.
- Recruiting information you provide when expressing interest in a role, subject to any separate applicant privacy notice.
How we use information
We use personal information where reasonably necessary to operate our business, fulfill agreements, comply with law, protect legitimate interests, or act with your consent.
- Provide, secure, support, and improve our websites and managed security services.
- Respond to requests, schedule briefings, manage customer relationships, and provide relevant service information.
- Detect fraud, abuse, vulnerabilities, and threats; protect systems and data; and investigate security incidents.
- Analyze website performance and service usage, improve operations, and develop aggregated or de-identified insights.
- Meet legal, regulatory, contractual, accounting, and recordkeeping obligations and establish or defend legal claims.
- Send marketing communications where permitted. You may opt out of promotional email using the unsubscribe method provided in the message.
Cybersecurity and service data
Managed security services may process device, identity, cloud, network, application, log, alert, and incident data necessary to detect, investigate, contain, and report threats. The exact data depends on the services selected and the customer's configuration.
We may create aggregated or de-identified information for security research, service improvement, analytics, and threat reporting. We take reasonable steps intended to prevent this information from identifying a customer or individual before using or sharing it for those purposes.
International transfers
901Cyber and its providers may process information in countries other than the one where you live. Where required, we use recognized safeguards for international transfers, such as contractual protections, adequacy decisions, or another lawful transfer mechanism.
Retention and security
We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including service delivery, security, legal obligations, dispute resolution, and enforcement. Retention periods depend on the type of information, the relationship, and applicable requirements.
We use administrative, technical, and physical safeguards designed to protect personal information. No system or transmission method is completely secure, and we cannot guarantee absolute security.
Your choices and privacy rights
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or obtain a portable copy of certain personal information. You may also have the right to withdraw consent or appeal a decision about a request.
To submit a request, email privacy@aegisgrid.security. We may need to verify your identity and authority before responding. Authorized agents may submit requests where permitted by law. You may also contact your local data protection authority.
Children and external links
Our websites and services are intended for business users and are not directed to children under 16. We do not knowingly collect personal information from children through the website.
Links to third-party websites are provided for convenience. Their privacy practices are governed by their own policies, not this Policy.
Changes and contact
We may update this Policy to reflect changes in our practices, services, or legal obligations. We will post the revised version here, update the date above, and provide additional notice when required.
For privacy questions or requests, contact privacy@aegisgrid.security. For general questions, contact hello@aegisgrid.security.