Privacy Policy

1. Introduction

Transformyx Technology Services, LLC ("Transformyx," "we," "us," or "our") is committed to protecting your privacy and the security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use the CyberCAAT (Cybersecurity Assessment & Auditing Technology) platform.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, job title, organization name, and contact details when you create an account or contact us
• Assessment Data: Information entered during risk assessments, compliance evaluations, and security audits
• Organization Data: Details about your organization's IT infrastructure, security controls, and compliance status
• Communication Data: Records of your communications with our support team

2.2 Automatically Collected Information

• Usage Data: How you interact with the platform, features used, and time spent
• Device Information: Browser type, operating system, device identifiers, and IP address
• Log Data: Access times, pages viewed, and actions taken within the platform

2.3 Third-Party Data Sources

• Security Intelligence: Breach data from Have I Been Pwned (HIBP), Shodan infrastructure scans, and vulnerability databases
• Threat Feeds: CISA alerts, CVE databases, and security news sources

3. How We Use Your Information

We use your information for the following purposes:

• Service Delivery: To provide, maintain, and improve the CyberCAAT platform
• Security Assessments: To conduct risk assessments, compliance evaluations, and generate security reports
• Communication: To send important updates, security alerts, and respond to inquiries
• Analytics: To understand usage patterns and improve our services
• Legal Compliance: To comply with applicable laws and regulations
• Security: To detect, prevent, and respond to security incidents

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party vendors who assist in operating our platform (hosting, email, analytics)
• Legal Requirements: When required by law, subpoena, or legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Protection: To protect the rights, property, or safety of Transformyx, our users, or others
• Consent: With your explicit consent for any other purposes

5. Data Security

We implement robust security measures to protect your information:

• Encryption of data in transit (TLS 1.3) and at rest (AES-256)
• Multi-factor authentication options
• Regular security assessments and penetration testing
• Access controls and audit logging
• Secure cloud infrastructure with SOC 2 compliance
• Regular security training for all personnel

6. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Assessment data is retained according to your organization's requirements and applicable compliance frameworks. You may request deletion of your data at any time, subject to legal retention requirements.

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Portability: Receive your data in a portable format
• Objection: Object to certain processing activities
• Restriction: Request restriction of processing

To exercise these rights, contact us at privacy@transformyx.com.

8. Cookies and Tracking

We use essential cookies to operate the platform and optional analytics cookies to improve our services. See our Cookie Policy for detailed information.

9. Children's Privacy

CyberCAAT is designed for business use and is not intended for individuals under 18 years of age. We do not knowingly collect information from children.

10. International Data Transfers

Your information may be transferred to and processed in the United States. We ensure appropriate safeguards are in place when transferring data internationally.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or through the platform. Your continued use after changes constitutes acceptance of the updated policy.

12. Contact Us