Privacy Policy (v1)

Effective date: 2026-02-18 Version: v1

1. Introduction

At CyberNova Protect ("CyberNova", "we"), we respect your privacy. This Policy explains what data we collect, how we use it, and your options.

2. Data We Collect

We may collect:

  • Account data: name, email, hashed credentials.
  • Billing data: billing profile information and payment metadata.
  • Operational data: registered IP addresses, subscription status, technical events.
  • Technical data: connection IP, user-agent, security and audit logs.
  • Consent data: accepted terms/privacy version, acceptance timestamp, and related metadata.

We do not store full payment card details; payment providers process that data.

3. Processing Purposes

We process data to:

  • Provide and maintain the service.
  • Authenticate users and protect accounts.
  • Manage subscriptions, payments, and billing.
  • Enforce plan limits and security controls.
  • Comply with legal and contractual obligations.
  • Improve performance, stability, and product experience.

4. Legal Basis (where applicable)

We process data based on:

  • Contract performance.
  • Legitimate interests (security, anti-fraud, product improvement).
  • Legal obligations.
  • Consent (where required).

5. Data Sharing

We may share data with:

  • Payment and billing providers (e.g., Stripe).
  • Infrastructure, monitoring, and email providers.
  • Authorities when legally required.

We require third parties to apply appropriate security and limited-use safeguards.

6. Data Retention

We retain data as needed to:

  • Deliver the service.
  • Meet legal, tax, and security obligations.
  • Resolve disputes and enforce agreements.

7. Security

We apply reasonable technical and organizational measures, including:

  • Sensitive secret/credential protection.
  • Access controls and role-based permissions.
  • Audit logging and event tracking.
  • Rate-limiting and anti-abuse protections.

No system is 100% secure.

8. International Transfers

Depending on infrastructure and providers, data may be processed in multiple jurisdictions with appropriate safeguards.

9. Your Rights

Depending on your jurisdiction, you may request:

  • Access, correction, or deletion.
  • Restriction or objection.
  • Data portability.
  • Consent withdrawal where applicable.

To exercise rights, contact us by email.

10. Cookies and Similar Technologies

We may use cookies/local storage for:

  • Session/authentication handling.
  • Preference storage (e.g., language/theme).
  • Security and anomaly detection.

11. Children

The service is not directed to children without legal guardian authorization where required by law.

12. Changes to This Policy

We may update this Policy. We will publish the latest version and effective date.

13. Contact

For privacy inquiries:

  • Email: info@cybernovaprotect.com

Note: This is an MVP legal baseline and should be reviewed by legal counsel before production use.