Two roles we play
Our own data. For website visitors, people who contact us, and the account and billing contacts of our customers, CyberWall decides how information is used. This policy covers that information.
Our customers' data. When a business or IT provider ("Customer") uses the Services, the data their computers, accounts and users send into the platform (for example security events, device inventory, files, backups, tickets, call recordings and activity data) belongs to that Customer. We process it only on the Customer's instructions and under our agreement with them. If you are an employee or client of one of our Customers, please contact that organization with privacy questions; we will help them respond.
What we collect
- Contact and account information: name, company, job title, email, phone, login name, and two-factor authentication settings (we store a protected secret, never your authenticator codes).
- Billing information: billing contact, invoices and payment status. Card and bank numbers are handled by our payment processor; we do not store them.
- Support and communications: tickets, emails, chat messages, and - where a Customer turns it on - recorded phone calls and their summaries.
- Website information: pages viewed, browser type, IP address and approximate location, collected in standard server logs. We do not use advertising trackers.
- Service data (on behalf of Customers): device names and hardware details, installed software, security and sign-in events, file activity, backups, Microsoft 365 sign-in and security data, compliance evidence, and - only where a Customer turns on CyberWall Insights - application and website usage and active time. The Services never record keystrokes.
How we use it
- To provide, secure, maintain and support the Services, including sending alerts by email, text message, phone call and app notification to the people a Customer chooses.
- To create and manage accounts, verify identity and prevent fraud and abuse.
- To invoice and collect payment.
- To answer questions and demo requests, and - if you agree - to send product news (you can opt out at any time).
- To improve the Services using aggregated or de-identified information.
- To meet legal obligations and enforce our agreements.
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
Artificial intelligence features
Some features use artificial intelligence (for example the in-app assistant, alert and incident summaries, ticket suggestions and call summaries). When you use them, the relevant text is sent to our AI service provider to produce the answer. Our provider is contractually restricted from using Customer data to train its models. AI output can be wrong; it is a suggestion for a person to review, not a decision.
Who we share it with
We share information only with service providers that help us run the Services, under contracts that require them to protect it (see Subprocessors); with a Customer's own administrators, who control their company's data; when required by law or to protect rights and safety; and in connection with a merger or sale of our business, subject to this policy.
Where data is stored and how it is protected
Data is hosted in the United States. We protect it with measures that include encryption in transit, encryption of backups and files with keys unique to each Customer, two-factor sign-in, signed agent instructions, role-based access, audit logging, and backups locked against deletion. No system is perfectly secure; if we learn of a breach affecting your personal information we will notify you and the relevant authorities as the law requires.
How long we keep it
We keep account and billing records for as long as the account is active and as required by tax and accounting law. Service data is kept according to the retention a Customer sets and our standard periods (for example raw device event logs about 90 days, raw Insights activity about 30 days, backups for the Customer's chosen retention). When a Customer leaves, we delete or return their data as our agreement provides, except where the law requires us to keep it.
Your choices and rights
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, and to object to or limit certain uses. To make a request, email support@cyberwallsecurity.com. We will verify your request and respond within the time the law requires. If your information was provided by one of our Customers, we will forward your request to them. We will not discriminate against you for exercising your rights.
Text messages and calls
We send text messages and automated calls only for security alerts, sign-in codes and service notices that you or your organization set up. Message frequency varies. Message and data rates may apply. Reply STOP to stop texts or HELP for help. We do not sell or share phone numbers for marketing, and we do not use them for marketing texts without separate consent.
Children
The Services are for businesses and are not directed to children under 16. We do not knowingly collect their personal information.
Changes and contact
We will post changes here and update the effective date; for material changes we will notify account owners. Questions: support@cyberwallsecurity.com or CyberWall Security, LLC, 400 Riverhills Business Park, Suite 465, Birmingham, AL 35242.