CyberAuditX
PHISHING AWARENESS & SIMULATION
Request a Consultation

Privacy Policy

Last updated: October 2026

Legal & Simulation Authorization Disclaimer

Website is for informational purposes. Simulations require explicit written client authorization.

This Privacy Policy explains how CyberAuditX collects, uses, and protects information when you use our website or engage our services. Please read it carefully. If you have any questions, please contact us.

1. Who We Are

CyberAuditX (referred to as "we", "us", or "our") provides phishing awareness training, authorized phishing simulations, and related security awareness services. Our website is located at https://cyberauditx.tech.

For privacy-related queries, please contact us at: contact@cyberauditx.tech

2. Information We Collect

When you use our website or contact us, we may collect:

  • Contact information you provide through our contact form (full name, company name, email address, team size, selected service, and message).
  • Basic server logs collected by our hosting infrastructure (IP address, browser type, timestamp) for system security and operational integrity. We do not use third-party advertising or tracking cookies.

3. How We Use Your Information

Information you submit through our contact form is used solely to:

  • Respond to your consultation enquiry.
  • Discuss potential security awareness engagements with your organization.
  • Send you relevant campaign proposals and service details you have requested.

We never sell, rent, or trade your contact information with third parties.

4. Phishing Simulation Data

For clients who engage our phishing simulation services:

  • Simulations are conducted only with explicit written authorization from the client organization.
  • We observe employee response patterns (such as whether a benign test link was clicked or reported) strictly for evaluating workforce awareness.
  • We do not collect, intercept, or store real user passwords or corporate credentials at any point.
  • We do not store or publish individual employee results in a way that identifies specific persons publicly.
  • Engagement campaign data is handled as described in the written contract with each client organization and deleted upon completion or request.

5. Data Retention & Deletion

Contact enquiry data is retained only for the duration necessary to manage your business request, typically up to 12 months, after which it is securely deleted.

You have the right to request immediate deletion of your contact details at any time by emailing contact@cyberauditx.tech.

6. Third-Party Processors

To provide reliable web services, we utilize trusted third-party service providers:

  • **Formspree (Form Processor):** Contact form submissions are processed and delivered via Formspree Inc. (view their privacy policy at https://formspree.io/legal/privacy-policy).
  • **Hosting Provider:** Our static assets and HTML are served via secure edge delivery networks which may maintain standard web server access logs for DDoS mitigation and reliability.

We do not embed third-party analytics trackers, social tracking pixels, or advertising beacons.

7. Your Rights

Depending on your jurisdiction (such as under India's Digital Personal Data Protection Act or the EU GDPR where applicable), you may have the right to access, rectify, or request deletion of your personal data.

To exercise these rights, please contact us at contact@cyberauditx.tech. We respond to all verified requests promptly.

8. Security

We implement modern technical safeguards, including HTTPS encryption, Content Security Policies, and access controls to protect information submitted to us. However, no internet transmission is 100% immune from compromise.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be published on this page with an updated revision date.

10. Contact

For privacy-related queries, data subject requests, or concerns, please contact us at:

Email: contact@cyberauditx.tech