Legal

Privacy Policy

Last updated: January 1, 2025 · support@cswt.io

1. Introduction

CSWT (“we,” “our,” or “us”) is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cybersecurity platform and services.

By using our services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

  • Account registration data (name, email address, company name)
  • Payment information (processed securely through third-party providers)
  • Domain names, IP addresses, and digital assets you register for monitoring
  • Communications with our support team

2.2 Automatically Collected Information

  • Usage data and platform interaction logs
  • Device information and browser type
  • IP address and approximate location
  • Cookies and similar tracking technologies

3. How We Use Your Information

We use collected information to:

  • Provide, operate, and maintain our cybersecurity services
  • Monitor your registered assets for threats and vulnerabilities
  • Send security alerts and threat notifications
  • Process payments and manage your subscription
  • Improve and personalize our platform
  • Comply with legal obligations

4. Data Security

We implement industry-standard security measures to protect your data, including:

  • End-to-end encryption for data in transit (TLS 1.3)
  • AES-256 encryption for data at rest
  • Regular security audits and penetration testing
  • Role-based access controls and multi-factor authentication
  • SOC 2 compliant infrastructure

5. Data Sharing

We do not sell your personal information. We may share your data with:

  • Service providers who assist in operating our platform (under strict confidentiality agreements)
  • Law enforcement when required by law or to protect our rights
  • Business partners with your explicit consent

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Threat intelligence data and security logs are retained for 12 months by default. You may request deletion of your data at any time by contacting us.

7. Your Rights (GDPR)

If you are in the European Economic Area, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion (“right to be forgotten”)
  • Object to processing
  • Data portability
  • Lodge a complaint with a supervisory authority

8. Cookies

We use essential cookies to operate our platform and analytical cookies to improve our services. You can control cookie preferences through your browser settings. Disabling cookies may affect platform functionality.

9. Contact Us

For privacy-related questions or to exercise your rights, contact our Data Protection Officer: