Privacy Policy

1. Data Controller

The controller of personal data collected on CyberDash is:

SASU ACKTECK

2. Data Collected

2.1 Registration Data

When creating your account, we collect:

• First and last name
• Email address
• Password (encrypted)
• Company (optional)
• Job title (optional)

2.2 Usage Data

During use of the service, we collect:

• Assets added for analysis (domains, IPs, URLs, emails)
• Analysis results and generated reports
• Connection and activity logs
• Interactions with the AI assistant
• User preferences

2.3 Payment Data

Payment data is processed by our provider Stripe. We do not store any banking data on our servers.

2.4 Technical Data

We automatically collect:

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent
• Performance data

3. Processing Purposes

Your data is processed for:

3.1 Service Provision

• Account creation and management
• Security analysis execution
• Personalized report generation
• AI assistant operation

3.2 Business Management

• Subscription and billing management
• Customer support
• Communication about our services

3.3 Service Improvement

• Usage analysis and statistics
• New feature development
• Performance optimization

3.4 Security

• Fraud prevention
• System security
• Compliance with legal obligations

4. Legal Bases

The processing of your data is based on:

• Contract execution: for the provision of CyberDash service
• Legitimate interest: for service improvement and security
• Consent: for marketing communications (optional)
• Legal obligation: for billing data retention

5. Retention Period

Your data is retained:

• Account data: during service use + 1 year
• Analysis data: during subscription + 2 years
• Billing data: 10 years (legal obligation)
• Technical logs: 13 months maximum

6. Recipients

Your data may be transmitted to:

• ACKTECK teams: development, support, security
• Technical providers: hosting (OVH), payment (Stripe)
• Subcontractors: bound by data protection contracts
• Authorities: only upon legal request

7. International Transfers

Your data is hosted in France (OVH). Some providers (Stripe) may perform transfers to the United States under approved transfer mechanisms (standard contractual clauses).

8. Your Rights

In accordance with GDPR, you have the following rights:

8.1 Exercising Your Rights

To exercise your rights, contact us at: [email protected]
We will respond within 1 month maximum.

8.2 Right to Complaint

You can file a complaint with the CNIL: www.cnil.fr

9. Data Security

ACKTECK implements appropriate security measures:

• Encryption: SSL/TLS for transmissions, encryption of sensitive data
• Controlled access: strong authentication, permission management
• Backup: regular and secure data backup
• Monitoring: access monitoring and incident detection
• Training: regular team awareness

10. Cookies

CyberDash uses cookies for:

• Functionality: user session, preferences (strictly necessary)
• Statistics: anonymized usage analysis (with consent)
• Performance: service optimization (with consent)

You can manage your cookie preferences in your browser or via our consent banner.

11. Modifications

This policy may be modified to adapt to service evolution or regulations. You will be informed of any significant modification by email or via the platform.

12. Contact

For any questions regarding this privacy policy: