How sEyeber Hub handles personal data and customer information.

1. Who we are

This Privacy Policy applies to sEyeber Hub (a product of GiGCXOs) and describes how we collect, use, share, retain, and protect information in connection with our website, early access requests, and our connector-driven AI and cybersecurity risk discovery platform mapped to NIST CSF 2.0 (collectively, the "Service"). It applies to visitors, prospective customers, registered users, and administrators of organizations that use the Service.

2. Information we collect

We may collect information you provide directly to us, such as your name, email address, firm name, account details, billing contact details, support communications, and other information submitted through our site or product.

We may also collect information generated through your use of the platform, including account activity, administrative actions, connector configuration data, discovery outputs, security evidence, usage logs, device and browser information, and other service telemetry needed to operate, secure, and improve the Service.

3. How we use information

• Provide, operate, secure, and support the website and platform.
• Set up and administer organization-based subscriptions and accounts.
• Process billing and subscription events through Stripe.
• Run discovery workflows, map findings, and generate mitigation-related outputs.
• Respond to inquiries, early access requests, and customer support requests.
• Send administrative, security, and service-related communications, and, where permitted, product updates.
• Monitor, detect, prevent, and investigate security issues, fraud, abuse, or policy violations.
• Comply with legal obligations and enforce our agreements.

4. Cookies and tracking technologies

Our website uses cookies and similar technologies to keep you signed in, remember preferences, and understand aggregate site usage through analytics tools. We do not use cookies to sell personal information. Most browsers let you block or delete cookies through their settings; doing so may affect some site functionality. Where required by law, we will present a cookie notice or consent banner and honor the choices you make there.

5. How we share information

We may share information with trusted service providers that help us operate the platform, including infrastructure, hosting, database, deployment, analytics, support, and payment providers. Our current architecture includes providers such as Stripe, Netlify, Fly.io, and Neon. These providers are permitted to use information only as needed to perform their services for us.

We may also disclose information when required by law or legal process, to protect the rights, safety, or security of sEyeber Hub, our customers, or others, in connection with a merger, acquisition, financing, or sale of assets, or with your direction or consent. We do not sell personal information.

6. AI data handling

sEyeber Hub is designed to use organization-scoped AI processing contexts so one firm's scan data is not intended to become context for another firm's scan workflow. We are designing the platform to minimize cross-customer exposure, restrict internal access on a least-privilege basis, and avoid using customer scan data to train shared or third-party foundation models unless a customer explicitly opts in.

7. Data retention

We retain information for as long as reasonably necessary to provide the Service, comply with legal obligations, resolve disputes, maintain security records, and enforce our agreements. Retention periods may vary depending on the type of data, customer configuration, subscription status, and applicable law. When information is no longer needed for these purposes, we take reasonable steps to delete or de-identify it.

8. Your rights and choices

Depending on where you are located, you may have rights to access, correct, delete, or restrict certain personal data, to object to certain processing, or to request portability of certain personal data. Residents of jurisdictions with comprehensive privacy laws (such as the EU/UK General Data Protection Regulation or U.S. state privacy laws like the California Consumer Privacy Act) may also have the right to appeal a decision on a prior request and to designate an authorized agent, subject to verification. To exercise these rights, contact us at info@seyeberhub.com. We may need to verify your identity before fulfilling requests and may decline requests where an exception applies under law.

9. International data transfers

Your information may be processed in the United States and other jurisdictions where we or our service providers operate, which may have different data protection laws than your home jurisdiction. Where required, we rely on appropriate safeguards, such as standard contractual clauses or equivalent mechanisms, for cross-border transfers of personal data.

10. Security

We use administrative, technical, and physical safeguards designed to protect information. No security measure is perfect, but our goal is to apply least-privilege access, encryption in transit and at rest, logging, monitoring, vendor due diligence, and secure development practices appropriate for the type of data we handle. See our Trust & Security page for more detail on our platform security approach.

11. Children's privacy

The Service is intended for business use by adults and organizations and is not directed to children. We do not knowingly collect personal information from individuals under 16. If we learn we have inadvertently collected such information, we will take steps to delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will post an updated effective date and, where appropriate, provide additional notice, such as a prominent notice on our site or a direct communication to affected users.

13. Contact

If you have privacy questions, requests, or concerns, contact us at info@seyeberhub.com.