Privacy Policy

Effective Date: August 24, 2026
Last Updated: September 1, 2026

Introduction

CyberSafe.Now provides a security compliance platform for small to medium-sized businesses using Google Workspace, Microsoft 365, Amazon Web Services (AWS), and Dropbox. This Privacy Policy explains how we collect, use, protect, and share information when you use our service.

For pre-release inquiries, contact us at agent@cybersafe.now.

Information We Collect

Information You Provide

  • Pre-release inquiries: Name, company, full address, email, and phone number when you submit the Contact Us for Pre-Release form. We email those details to agent@cybersafe.now.
  • Account Information: Company name, team size, contact email, and billing details when you subscribe.
  • Environment Profile: Your primary platform (Google Workspace, Microsoft 365, AWS, or Dropbox), device types, public exposure, file transfer methods, backup approach, and compliance goals.
  • Program Owner Designation: Name, title, and email address of your designated security program owner.

Information We Access Through Connectors

When you connect your platforms to CyberSafe.Now, we access the following information on a read-only basis:

  • Google Workspace: Admin settings, user accounts, OAuth grants, security alerts, and email routing configuration.
  • Microsoft 365: Admin settings, user accounts, OAuth permissions, security alerts, and email routing configuration.
  • AWS: IAM configuration, account settings, and resource access policies (via read-only access keys you provide).
  • Dropbox: Admin settings, user accounts, sharing configurations, and team folder structure.
  • Endpoint Agents: Device enrollment status and security posture (device encryption, firewall status, OS patch level).
  • Email and Domain: DNS records (SPF, DKIM, DMARC), MX records, and public exposure scan results when you authorize external scanning.

Automatically Collected Information

  • Usage Data: Dashboard access, plan item completion, report generation, and connector sync activity.
  • System Logs: Application access logs, sync job outcomes, and evidence archive generation (when enabled).

How We Use Your Information

We use the information we collect to:

  • Generate and maintain your customized security plan based on your environment and compliance goals.
  • Perform automated checks of your admin settings, identity configurations, sharing permissions, and security posture.
  • Detect security drift and misconfigurations across your connected platforms.
  • Generate compliance reports and evidence archives that you can share with third parties (brokers, auditors, or insurers).
  • Send notifications about plan items, security findings, and compliance tasks.
  • Provide email reports on security status, monthly summaries, and joiner/leaver workflows.
  • Maintain your compliance evidence archive (optional add-on on Essentials and Monitor plans; included on Assure Plan).
  • Process billing and manage your subscription.
  • Improve and support our service.

Data Retention and Storage

  • Active Subscription: We retain your account data, environment profile, plan items, security findings, and connector data for the duration of your subscription.
  • Security Findings — Default Retention: On Essentials Plan and Monitor Plan, operational records (exposure scans, endpoint checks, connector findings, and monthly reports) are retained for 6 months by default. Workspace security alerts are retained for 3 years regardless of plan.
  • Security Findings — Extended Retention: You may purchase the 3-year retention add-on ($10/month) on Essentials Plan or Monitor Plan to extend operational record retention from 6 months to 3 years. Assure Plan includes 3-year retention for all operational records at no extra charge.
  • Compliance Evidence Archives: When you purchase the compliance evidence archive add-on (optional on Essentials and Monitor; included on Assure Plan), monthly evidence packs are stored on your dedicated dashboard's encrypted volume and retained according to your plan's retention window.
  • After Cancellation: Upon subscription cancellation, your dedicated security dashboard and all associated data are de-provisioned. Evidence archives (if purchased) remain available for download during your subscription and for a brief grace period after cancellation.

Data Sharing and Disclosure

We do not sell your information. We share information only in the following circumstances:

  • With Your Consent: When you generate and share a compliance report with a third party (broker, auditor, insurer), we share the report data you explicitly choose to share via a secure, time-limited link or PDF download.
  • Service Providers: We use third-party service providers for hosting (Amazon Web Services), payment processing (Stripe), and email delivery (where applicable). These providers are contractually required to protect your data and use it only for the services they provide to us.
  • Legal Requirements: We may disclose information if required by law, court order, or governmental request, or to protect the security or integrity of our service.

Security

We implement industry-standard security measures to protect your information:

  • All data in transit is encrypted using TLS.
  • Connector credentials (OAuth tokens, AWS access keys) are encrypted at rest.
  • Access to your dedicated security dashboard requires authentication.
  • Platform connectors are read-only; we never modify your Google, Microsoft, AWS, or Dropbox settings.
  • Our endpoint agent uses a unique enrollment token per customer and runs with minimal privileges.
  • Compliance evidence archives are stored on encrypted volumes within your dedicated virtual machine.

Your Rights and Choices

  • Access and Update: You can view and update your account information, environment profile, and program owner designation through your dashboard Settings page.
  • Disconnect Connectors: You may disconnect any platform connector at any time through your dashboard. This will stop automated checks for that platform.
  • Cancel Subscription: You may cancel your subscription at any time through your dashboard Billing settings. Upon cancellation, your data will be de-provisioned as described in the Data Retention section.
  • Data Portability: You can download compliance reports, evidence archives, and security findings at any time during your subscription.

Third-Party Platforms

Your use of Google Workspace, Microsoft 365, AWS, Dropbox, and other connected platforms is governed by their respective privacy policies and terms. CyberSafe.Now accesses these platforms only to the extent you authorize and only for the purposes described in this Privacy Policy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date and, for material changes, provide notice through your dashboard or via email to your program owner.

Children's Privacy

CyberSafe.Now is intended for business use and is not directed to children under 13. We do not knowingly collect information from children under 13.

Contact Us

If you have questions about this Privacy Policy or how we handle your information, contact us at:

CyberSafe.Now
Pre-Release Contact: agent@cybersafe.now

← Back to home | View Terms of Service