Privacy Policy
Last Updated: July 27, 2025
1. Introduction
This Privacy Policy explains how Scinary Cybersecurity, LLC ("we", "our", or "us") collects, uses, stores, and protects your information when you use our applications, which integrate with various third-party cloud services and APIs that may require sensitive or restricted access permissions.
We are committed to safeguarding your privacy and ensuring compliance with all applicable third-party service provider data policies and industry standards.
2. Information We Access
When you grant us permission to access your cloud service accounts, we may access specific data depending on the permissions you authorize and the services you connect. These may include:
- Email message metadata or content
- Cloud storage file names or contents
- Calendar events and scheduling data
- User profile information (e.g., email address, name, organizational data)
- Authentication and session information
- Activity logs and audit trails
- Administrative and security-related data
We only request access to the minimum necessary permissions required for core application functionality.
3. How We Use Your Information
Your data is only used for cybersecurity detection and remediation purposes, including:
- Identifying anomalous logins, user activity, or devices activity and alerting on suspicious activities
- Conducting investigations into activities of threat actors if accounts or devices are compromised
- Taking action to remediate the accounts or devices, such as device isolation, user suspension, or session revocation
- Monitoring and analyzing security events across your cloud infrastructure
- Providing incident response and threat detection capabilities
We do not sell, rent, or share your data with third parties for marketing or advertising purposes.
4. Data Storage and Security
We follow industry best practices to ensure your data is secure:
- All data transmission is encrypted using HTTPS/TLS
- Authentication tokens and credentials are securely stored and never shared
- Access to sensitive user data is restricted to essential application logic
- We perform regular security reviews and code audits
- No data is stored on our servers unless explicitly required for application functionality. Where possible, data is processed in real-time or stored ephemerally
5. Data Sharing and Disclosure
We do not share your data with any third parties unless:
- Required by law, subpoena, or legal process
- Necessary to enforce our legal rights or defend against legal claims
- You provide explicit consent
- Required for legitimate cybersecurity incident response activities
We do not use or transfer your data for purposes that are unrelated to the application's core cybersecurity features.
6. Compliance with Third-Party Service Policies
We comply with the data use policies of all integrated cloud service providers, including but not limited to:
- Google API Services User Data Policy and Limited Use requirements
- Microsoft Graph API Terms of Use
- Other applicable third-party service provider policies
We commit to:
- Using data only to provide or improve user-facing security features
- Not using or transferring data for advertising purposes
- Not allowing unauthorized access to your data
7. User Controls and Data Retention
You may revoke access at any time through your respective cloud service account settings or by contacting us directly. Each service provider maintains their own permission management:
- Google: https://admin.google.com/ac/owl
- Microsoft: https://entra.microsoft.com/
- Other services: Available through respective account security settings
We retain your data only as long as necessary for the cybersecurity purposes it was collected. Upon access revocation or service disconnection, all related data is promptly deleted or anonymized according to our data retention schedule.
8. International Data Transfers
If you are located outside the United States, please be aware that your data may be transferred to and processed in the United States where our servers are located. We ensure appropriate safeguards are in place for such transfers.
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. Users will be notified of significant changes via email notification, in-app notice, or updated posting with the new effective date.
10. Contact Us
If you have questions or concerns about this Privacy Policy or your data, please contact:
Scinary Cybersecurity
Email: contact@scinary.com
Contact Form: https://www.scinary.com/contact-us
Address: 215 South 2nd Street, Suite 302, Waco, Texas 76701