Privacy Policy

How we collect, use and protect personal information, and the rights you have under California law.

Effective date: November 1, 2026

This policy explains how CyberIncept ("we", "us") handles personal information collected through cyberincept.com (the "Site"). It is written to meet the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, the "CCPA") and the California Online Privacy Protection Act.

Information we collect

  • Contact and consultation requests: your name, company, work email, company size, the service or topic you are interested in, your preferred start time, your message, and whether you asked for an NDA.
  • Article notifications: your email address and the date you confirmed your subscription.
  • Technical data: IP address, browser type and request details. These are processed by our hosting and security providers to deliver the Site and protect it against abuse. We do not use them to build profiles about you.
  • Readiness check: your answers are scored in your browser and are not sent to us unless you choose to book a call and include the result.

We do not collect sensitive personal information as defined by the CCPA, and we do not knowingly collect information from children under 16.

How we use it

  • To reply to your request and schedule and prepare for a consultation.
  • To send article notifications you asked for, and only after you confirm your subscription.
  • To keep the Site secure, prevent spam and fraud, and comply with the law.

Cookies, analytics and tracking

The Site does not use advertising or third party tracking cookies, and does not run third party analytics. Your light or dark theme choice is stored in your browser's local storage and never leaves your device. Our forms use Cloudflare Turnstile to tell people from bots. Turnstile processes limited technical signals for that purpose only. We aggregate traffic statistics at our hosting provider without identifying individual visitors.

Because we do not track visitors across sites, we treat browser "Do Not Track" and Global Privacy Control signals as already honored.

Sharing

We do not sell or share personal information, as those terms are defined by the CCPA, and we do not use it for cross context behavioral advertising. We disclose it only to service providers that process it on our behalf under contract:

  • Amazon Web Services: hosting, storage and email delivery.
  • Cloudflare: bot protection on forms, and domain name services.
  • Microsoft: our business email, where we reply to your request.

We may also disclose information if required by law or to protect our rights, our users or the public.

How long we keep it

  • Contact and consultation requests: up to 24 months after our last interaction, unless we enter into an engagement, in which case our contract governs retention.
  • Subscriptions: until you unsubscribe. Unconfirmed subscription requests are deleted automatically within 7 days.
  • Security logs: up to 14 days.

Your California privacy rights

If you are a California resident, you have the right to:

  • know what personal information we collect, use and disclose, and to receive a copy of it;
  • request that we delete it;
  • request that we correct inaccurate information;
  • opt out of the sale or sharing of personal information (we do neither);
  • limit the use of sensitive personal information (we do not collect it); and
  • not be discriminated against for exercising any of these rights.

To make a request, email policy@cyberincept.com with the subject "Privacy request". We will confirm receipt within 10 business days and respond within 45 days. We verify requests by matching the email address you used with us. You may use an authorized agent, who must provide your signed permission.

Email choices

Every article notification includes a one click unsubscribe link. Replies to your own request are not marketing and do not include one.

Security

We protect personal information with encryption in transit and at rest, strict access controls, multi factor authentication for administrators and continuous monitoring. No method of transmission or storage is completely secure, but we work to industry standards to protect your information.

Changes to this policy

If we change this policy, we will update the effective date above. Material changes will be highlighted on this page.

Contact

Questions about this policy: policy@cyberincept.com.