Draft — not yet reviewed by a lawyer
This is a starting draft reflecting what Cyeber.ai actually collects and does with data today. It has not been reviewed by a lawyer and should not be relied on as final or legally compliant until it has been — particularly for Australian Privacy Principles (APP) obligations under the Privacy Act 1988. Remove this notice only after that review.
Privacy Policy
Last updated: [date] · Contact: info@cyeber.com.au
Who this is
Cyeber.ai is operated by an individual (not currently a registered company). Contact details are at the bottom of this page and on our Contact page.
What we collect
- • Account information: email address, display name, and how you signed in (Google, Microsoft, or email/password)
- • Community profile details you choose to add: username, bio, avatar
- • Content you submit: detections, comments, group activity, likes and follows
- • If you or your organisation use the paid workspace: organisation name, industry, country, member roles
- • If you connect a third-party security tool (e.g. Splunk, Microsoft Sentinel): the authentication credentials you provide, stored encrypted, and the security data (alerts, vulnerabilities) that tool sends us on your behalf
- • Content and queries you submit to AI-powered features (detection conversion, explanation, generation)
- • Contact form submissions: name, email, and message
Who we share it with
We use the following third parties to run Cyeber.ai. Each processes only what's necessary for its function:
- • Neon — database hosting
- • Vercel — application hosting
- • Anthropic (and, if configured, other AI providers) — processes content you submit to AI features
- • Google / Microsoft — if you sign in with those accounts
- • Resend — delivers email notifications from the contact form
We do not sell your personal information, and we do not share it with third parties for their own marketing purposes.
Security
Third-party integration credentials (e.g. Splunk auth tokens) are encrypted at rest using AES-256-GCM before storage. Passwords are hashed with argon2id, never stored in plain text.
International users
Cyeber.ai's community features are open to individuals anywhere in the world. Our organisation/paid workspace is currently focused on the Australian market and is not actively onboarding European organisations at this stage — if that changes, GDPR-specific provisions will be added here.
Your rights
You can request access to, correction of, or deletion of your personal information by contacting us at info@cyeber.com.au. [Specific response timeframes and any exceptions to be confirmed with legal review, per Australian Privacy Principles 12–13.]
Children's privacy
Cyeber.ai is not directed at children and is not intended for use by anyone under 18.
Changes to this policy
We may update this policy as Cyeber.ai changes. Material changes will be reflected by an updated "Last updated" date above.