Privacy Policy

This Privacy Policy describes how GetCybr, Inc. ("GetCybr", "we", "us") handles personal information collected through our marketing website at www.getcybr.com. It does NOT cover use of the GetCybr application or paid services — see Section 9 below.

1. Information Collected on the Website

Information you provide directly

• Contact form — name, work email address, company name, and your message
• Newsletter / marketing opt-in — email address

Information collected automatically

When you visit the Site, we automatically collect:

• IP address and approximate geographic location
• Browser type and version
• Device identifiers and operating system
• Referring URL and exit pages
• Pages viewed and time spent on each page
• Timestamps of visits

2. Cookies & Analytics

We use the following tools on this website:

• Google Analytics (via Google Tag Manager) — collects aggregated traffic data (pages viewed, session duration, referral sources). Cookies are set only after you consent via our cookie banner. You can opt out at any time through the banner or via Google's opt-out tool.
• Sentry — used for error monitoring and performance tracing on the website to detect and fix technical issues. Sentry may collect IP address and browser metadata in error reports.
• Cloudflare — our hosting and CDN provider. Cloudflare processes all web traffic and may collect IP addresses and request metadata for security and performance purposes. See Cloudflare's privacy policy.

You can manage cookie preferences at any time via the cookie banner on the Site or through your browser settings. Disabling analytics cookies will not affect your ability to browse the Site.

3. How We Use This Information

We use the information collected on this website to:

• Respond to your inquiry submitted through the contact form
• Send marketing communications you have opted in to receive (with the ability to opt out at any time)
• Measure site traffic, understand how visitors use the Site, and improve its content
• Detect, investigate, and prevent abuse, security incidents, and fraudulent activity
• Comply with applicable legal obligations

We do not use website visitor data to train or improve AI models.

4. Legal Bases for Processing (GDPR)

Where the General Data Protection Regulation (GDPR) applies, we rely on the following legal bases:

• Consent — for optional marketing communications and analytics cookies
• Legitimate interests — for website analytics, security monitoring, and fraud prevention, where those interests are not overridden by your rights
• Legal obligation — where processing is required by law

5. Sharing & Subprocessors

We do not sell your personal data. We may share information with the following categories of recipients:

• Subprocessors — Cloudflare (hosting and CDN), Google Analytics (web analytics), Sentry (error monitoring), and our email delivery provider, each acting under contractual data protection obligations
• Legal disclosure — when required by law, court order, or government authority
• Business transfer — in connection with a merger, acquisition, or sale of assets; we will notify you by email if your personal data is transferred as part of such a transaction

6. Retention

• Contact form submissions — retained for up to 24 months from the date of submission
• Marketing opt-ins — retained until you withdraw your consent or unsubscribe
• Automatic logs (IP address, browser metadata, analytics) — purged within 90 days, unless required to be retained for ongoing security investigations

7. Your Rights (GDPR / CCPA)

Depending on where you are located, you may have the following rights:

• Access — request a copy of personal data we hold about you
• Correction — request that we correct inaccurate or incomplete data
• Deletion — request that we delete your personal data ("right to be forgotten")
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Opt-out of marketing — unsubscribe from marketing emails at any time via the unsubscribe link or by contacting us

To exercise any of these rights, contact us at privacy@getcybr.com. We will respond within thirty (30) days.

If you are located in the EEA or UK and are not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority.

8. Security

We implement appropriate technical and organisational measures to protect personal data collected through this website, including:

• Encryption of web traffic in transit (TLS 1.2+)
• Access controls on internal systems that process personal data

We are pursuing ISO 27001 certification, targeting completion in Q4 2026. Our information security management practices are being aligned with ISO 27001 controls during this period.

No method of transmission over the Internet is 100% secure. While we apply commercially reasonable safeguards, we cannot guarantee absolute security.

9. Application & Services Data

Use of the GetCybr application and any paid services is governed by your partnership agreement with GetCybr, Inc., which may include a Data Processing Addendum (DPA). Application-data handling, retention, subprocessors, and security obligations are defined in that signed agreement, not in this Privacy Policy.

10. International Transfers

Personal data collected through this website may be transferred to and processed in countries outside your own, including the United States. Where required, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to provide an adequate level of protection. Contact us at privacy@getcybr.com to obtain a copy of the applicable transfer mechanisms.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects when it was last revised. Where changes are material, we will notify you by email if you have subscribed to our mailing list. Continued use of the Site following any update constitutes acceptance of the revised policy.

12. Contact

Questions about this Privacy Policy or our data practices? Contact our privacy team:

GetCybr, Inc. — Privacy Team
Email: privacy@getcybr.com