Privacy Policy

Cyber Silo Tech ("CyberSilo," "we," "our," or "us") is the data controller responsible for personal data processed through our website and products. We operate an AI-powered cybersecurity SaaS platform providing threat intelligence, security information and event management (SIEM), Security Operations Center (SOC) automation, and Governance, Risk, and Compliance (GRC) tooling to enterprise clients worldwide.

We maintain operations and serve clients in Canada, the United States, the United Arab Emirates, the United Kingdom, Pakistan, and other global markets. Depending on where you are located and how you interact with our services, different privacy regulations may apply to your personal data.

This Privacy Policy applies to all personal data collected through our website at cybersilo.tech, our SaaS products (ThreatHawk SIEM, Agentic SOC AI, ThreatSearch TIP, and Compliance GRC), and any related communications or support interactions. It does not apply to data processed by our customers within their own security environments using our platform — that processing is governed by the applicable Data Processing Agreement (DPA).

We collect personal data through several channels and for specific, legitimate purposes. We collect only what is necessary for the purposes described in this policy.

We process your personal data only where we have a valid legal basis to do so. The legal bases we rely on are: performance of a contract (where you are a customer), legitimate interests (for business development and security purposes), consent (for marketing and analytics), and legal obligation (for compliance and regulatory requirements).

We do not sell your personal data. We share data only with trusted third-party service providers ("data processors") who process it on our behalf under strict contractual obligations, or where legally required.

We may also disclose personal data to: (a) comply with a legal obligation or court order; (b) protect CyberSilo's rights or property; (c) investigate fraud or security incidents; (d) protect the safety of our users or the public; or (e) in connection with a merger, acquisition, or business restructuring, subject to equivalent data protection commitments.

As a global cybersecurity platform, your data may be transferred to and processed in countries outside your country of residence, including Canada, the United States, and the United Arab Emirates. We ensure that all cross-border data transfers are protected by appropriate safeguards.

Regardless of where your data is processed, CyberSilo maintains the same level of protection described in this policy and requires all processors to meet equivalent standards through Data Processing Agreements (DPAs). Copies of applicable SCCs are available upon request at legal@cybersilo.tech.

Depending on your jurisdiction, you have several rights regarding your personal data. Click any right below to learn more about what it means and how to exercise it:

To exercise any of these rights, contact our Data Privacy team at legal@cybersilo.tech. We will verify your identity before processing your request. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law. Our data retention schedule is as follows:

After the applicable retention period, personal data is securely deleted or irreversibly anonymised using NIST SP 800-88 compliant methods.

As a cybersecurity company, data security is at the core of how we operate. We implement layered technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction.

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours (GDPR) or as required by applicable law, and will inform affected individuals without undue delay where required. Data breach notifications are sent from legal@cybersilo.tech.

We use cookies and similar tracking technologies on our website. Our Cookie Policy provides full details on every cookie we use, your consent choices, and how to manage your preferences. Please see our Cookie Policy for complete information.

We implement Google Consent Mode v2, which ensures that Google's measurement services respect your consent choices. Analytics and advertising cookies are only loaded after explicit consent is obtained through our cookie banner.

We review and update this Privacy Policy at least annually, or sooner when required by changes in our practices, technology, legal requirements, or business circumstances. The "Last Updated" date at the top of this page reflects the most recent revision.

For material changes that significantly affect how we use your personal data, we will provide 30 days' advance notice by email (to registered account holders) and by posting a notice on our website. Continued use of our services after the effective date constitutes acceptance of the updated policy.

Previous versions of this policy are available upon request from legal@cybersilo.tech.

We aim to respond to all privacy enquiries within 5 business days. For formal data subject access requests (DSARs), please include your full name, the email address associated with your account (if applicable), and a description of your request. We may ask for proof of identity before processing your request.

If you are an EU/EEA or UK resident and you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local supervisory authority. For UK residents, this is the Information Commissioner's Office (ICO): ico.org.uk. For UAE residents, contact the UAE Data Office.