Privacy Policy

Who we are

This Privacy Policy explains how Cycurion, Inc. ("Cycurion," "we," "us") collects, uses and shares personal information through cycurion.com and its pages (the "Site"). Cycurion is a Delaware corporation headquartered at 1640 Boro Place, Suite 420C, McLean, VA 22102. For personal information collected through the Site, Cycurion is the controller.

This policy covers the Site only. Cycurion's products and services, including Cycurion Panoptic, Cycurion Habit and Cycurion Fathom, are governed by the agreements and privacy terms that apply to those services. The investor relations site at investors.cycurion.com is operated by a third-party provider and has its own terms and privacy notice.

Information we collect

Information you give us. When you book a demo or contact us, we collect your first and last name, business name, business email address, the product you are interested in, and anything you choose to write in the comment field.

Information collected automatically. When you visit the Site, our hosting provider records standard server log information, such as your IP address, browser type, the pages you request and the time of each request. If you have agreed to analytics where consent is required, HubSpot's tracking code sets cookies (including hubspotutk) that record the pages you visit, how you arrived and when, and links that activity to any form you submit.

Information from others. We may combine what you give us with business contact information that is publicly available or that you have shared with us through other channels, such as events or existing business relationships.

We do not ask for, and ask you not to submit, sensitive personal information through the Site.

How we use information

• To respond to your request, schedule and deliver demos, and follow up about Cycurion products and services you asked about.
• To route your request to the right team, using the product you selected.
• To send you relevant business communications, which you can opt out of at any time using the link in any email or by contacting us.
• To understand how the Site is used and improve its content and performance.
• To keep the Site secure, detect and prevent abuse, and maintain logs for security monitoring.
• To comply with law, enforce our terms and protect the rights, property and safety of Cycurion and others.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

Legal bases (EEA, UK and Switzerland)

If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on these legal bases: taking steps at your request before entering into a contract, when you ask for a demo or information; legitimate interests, to operate, secure and improve the Site and to communicate with business contacts about relevant services, balanced against your rights; consent, for analytics and marketing cookies and, where required, for marketing email, which you can withdraw at any time; and legal obligation, where the law requires us to keep or disclose information.

Cookies and similar technologies

The Site's own code does not set cookies. If you consent where consent is required, HubSpot's tracking code sets analytics cookies that help us understand visits and connect them to demo requests. Fonts are loaded from Google Fonts, which receives your IP address when your browser requests them. You can block or delete cookies in your browser settings; the Site works without them.

We honor Global Privacy Control signals as a request to opt out of any sharing that would count as a sale or targeted advertising under applicable law. Because no common standard exists for "Do Not Track," we do not respond to it separately.

How we share information

We share personal information only as follows:

• Service providers that process it on our behalf under contract, including HubSpot (customer relationship management, forms and analytics), our website hosting provider, and Google (font delivery).
• Cycurion companies. Our affiliates and subsidiaries, where your request concerns their services, under this policy.
• Legal and safety. When required by law, legal process or a governmental request, or to protect the rights, property or safety of Cycurion, our customers or others.
• Business transfers. In connection with a merger, acquisition, financing or sale of assets, subject to this policy.

International transfers

Cycurion is based in the United States, and our service providers may process information in the United States and other countries. When we transfer personal information from the EEA, the UK or Switzerland, we rely on an adequacy decision where one applies, including the EU-U.S. Data Privacy Framework and its UK and Swiss extensions for providers certified under it, or on the European Commission's Standard Contractual Clauses and the UK Addendum.

How long we keep information

We keep demo and contact requests, and the related contact record, for as long as we have an active or potential business relationship with you, and then for up to three years unless you ask us to delete it sooner or the law requires us to keep it longer. Server logs are kept for up to twelve months for security purposes. Analytics data is kept according to HubSpot's retention settings for our account.

Your rights and choices

Depending on where you live, you may have the right to access the personal information we hold about you, correct it, delete it, receive a portable copy, restrict or object to how we use it, withdraw consent, and opt out of marketing. Residents of California and other U.S. states with privacy laws have the right to know, access, correct and delete personal information, and to opt out of sale, sharing and targeted advertising, which we do not engage in. We will not discriminate against you for exercising these rights.

To make a request, email info@cycurion.com with the subject line "Privacy request." We will verify your request using the information we hold and respond within the time the law requires. An authorized agent may submit a request for you with your signed permission. If you are in the EEA, the UK or Switzerland, you may also lodge a complaint with your local data protection authority.

Security

We use administrative, technical and physical safeguards appropriate to the information we handle, including encrypted connections (HTTPS) across the entire Site, strict security headers, and access controls on the systems that hold contact records. No method of transmission or storage is completely secure, but security is our business and we treat your information accordingly.

Children

The Site is intended for businesses and professionals. It is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

Changes to this policy

We may update this policy as the Site or the law changes. We will post the updated version here and change the "Last updated" date. If a change is material, we will give additional notice where the law requires it.

Contact

Questions or requests about this policy or your personal information: email info@cycurion.com, or write to Cycurion, Inc., Attn: Privacy, 1640 Boro Place, Suite 420C, McLean, VA 22102.