At AMOSKYS, we take your privacy seriously. This Privacy Policy explains how we collect, use, protect, and share your personal information when you use our Neural Security Command Platform.
By using AMOSKYS, you consent to the data practices described in this policy.
1. Information We Collect
1.1 Account Information
When you create an account, we collect:
- Email address
- Password (stored as an Argon2id hash)
- Account creation timestamp
- Email verification status
- Last login timestamp
1.2 Agent Telemetry Data
Our security agents collect system telemetry from devices you authorize:
| Data Type | Purpose | Retention |
|---|---|---|
| Process Information | Detect malicious processes | 90 days |
| Network Activity | Identify suspicious connections | 90 days |
| File Integrity Hashes | Monitor unauthorized changes | 90 days |
| System Performance | Detect resource abuse | 90 days |
| SNMP Metrics | Network device monitoring | 90 days |
| Security Events | Threat correlation | 1 year |
1.3 Usage Information
We automatically collect:
- IP addresses (for rate limiting and security)
- Browser type and version
- API endpoint usage patterns
- Session activity timestamps
- Error logs and debugging information
2. How We Use Your Information
We use collected data to:
- Provide Security Services: Monitor deployed agents, detect threats, correlate events
- Authenticate Users: Verify identity and manage sessions
- Send Notifications: Email alerts for security events and account activities
- Improve Our Platform: Enhance threat detection algorithms and AI models
- Prevent Abuse: Rate limiting, fraud detection, and security monitoring
- Comply with Legal Obligations: Respond to lawful requests and protect rights
3. Data Security and Encryption
AMOSKYS employs enterprise-grade security measures to protect your data at every layer.
3.1 Encryption
- Data in Transit: TLS 1.3 with perfect forward secrecy
- Data at Rest: AES-256 encryption for all stored telemetry
- Password Storage: Argon2id hashing (OWASP 2024 recommended)
- Agent Communication: Mutual TLS (mTLS) authentication
- Session Tokens: SHA-256 hashed, HTTPOnly cookies
3.2 Access Controls
- Role-based access control (RBAC) for all data
- Multi-factor authentication (when enabled)
- IP-based rate limiting to prevent brute-force attacks
- Automated session expiration after inactivity
- Audit logging of all administrative actions
3.3 Infrastructure Security
- Regular security audits and penetration testing
- Isolated database environments with encrypted backups
- Network segmentation and firewall protection
- Real-time intrusion detection systems
- Automated vulnerability scanning
4. Data Retention and Deletion
4.1 Retention Periods
| Data Category | Default Retention | Notes |
|---|---|---|
| Account Information | Until account deletion | Required for service operation |
| Telemetry Data | 90 days | Configurable per organization |
| Security Events | 1 year | Required for threat intelligence |
| Audit Logs | 2 years | Compliance requirement |
| Session Data | 30 days after session ends | Automatically purged |
4.2 Data Deletion
You have the right to request deletion of your data:
- Account Deletion: Request via email to [email protected]
- Processing Time: Complete within 30 days
- Scope: All personal data and telemetry permanently deleted
- Exceptions: Data required for legal compliance (audit logs) retained separately
- Backups: Deleted from active systems; backup retention follows industry standards
5. Data Sharing and Third Parties
5.1 We Do NOT Sell Your Data
AMOSKYS will never sell, rent, or trade your personal information or telemetry data.
5.2 Limited Sharing
We only share data in these specific circumstances:
- Service Providers: Cloud hosting, email delivery (under strict DPAs)
- Threat Intelligence: Anonymous threat indicators shared with security community
- Legal Requirements: Court orders, subpoenas, or lawful government requests
- Business Transfers: In the event of a merger or acquisition (with user notification)
- With Your Consent: When you explicitly authorize sharing
5.3 Third-Party Services
AMOSKYS integrates with the following third-party services:
- Cloud infrastructure providers (AWS, GCP, or Azure)
- Email delivery services (for account verification and alerts)
- Analytics tools (anonymized usage data only)
- CDN providers (for static content delivery)
All third-party integrations are bound by Data Processing Agreements (DPAs) that ensure GDPR compliance.
6. Your Privacy Rights
Depending on your jurisdiction, you may have the following rights:
6.1 GDPR Rights (EU/EEA Users)
- Right to Access: Request a copy of all data we hold about you
- Right to Rectification: Correct inaccurate or incomplete information
- Right to Erasure: Request deletion of your personal data
- Right to Restriction: Limit how we process your data
- Right to Portability: Receive your data in a machine-readable format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Revoke consent at any time
6.2 CCPA Rights (California Users)
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to say no to the sale of personal information
- Right to access your personal information
- Right to equal service and price
6.3 Exercising Your Rights
To exercise any of these rights, contact us at:
Email: [email protected]
Subject Line: "Privacy Rights Request - [Your Right]"
Response Time: Within 30 days
7. Cookies and Tracking
7.1 Cookies We Use
| Cookie Name | Purpose | Duration |
|---|---|---|
| session_token | User authentication | Session (HTTPOnly, Secure) |
| csrf_token | CSRF protection | Session |
| preferences | UI settings | 1 year |
7.2 Tracking Prevention
AMOSKYS does NOT use:
- Third-party advertising cookies
- Cross-site tracking pixels
- Social media tracking widgets
- Browser fingerprinting techniques
8. International Data Transfers
AMOSKYS operates globally. Your data may be transferred to and processed in countries other than your country of residence.
We ensure adequate protection through:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Data Processing Agreements with all service providers
- Compliance with EU-U.S. Data Privacy Framework (if applicable)
- Encryption of all data in transit and at rest
9. Children's Privacy
AMOSKYS is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.
If we become aware that we have collected data from a child under 18, we will delete it immediately. Parents or guardians who believe we have collected such information should contact us at [email protected].
10. Data Breach Notification
In the unlikely event of a data breach that affects your personal information:
- Notification Time: Within 72 hours of discovery
- Method: Email notification to registered address
- Information Provided: Nature of breach, data affected, steps taken, recommended actions
- Regulatory Reporting: As required by applicable law
We employ continuous security monitoring, automated threat detection, and incident response procedures to prevent breaches before they occur.
11. Compliance and Certifications
AMOSKYS is committed to maintaining compliance with:
- GDPR: General Data Protection Regulation (EU)
- CCPA: California Consumer Privacy Act
- SOC 2 Type II: Security and availability controls (in progress)
- ISO 27001: Information security management (planned)
- NIST Cybersecurity Framework: Security best practices
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
- Changes in our data practices
- New features or services
- Legal or regulatory requirements
- Industry best practices
Notification: We will notify you of significant changes via email at least 30 days before they take effect. Continued use of AMOSKYS after changes constitutes acceptance.
Version History: Previous versions available upon request.
13. Contact Information
For questions, concerns, or requests regarding your privacy:
Privacy Team: [email protected]
Legal Inquiries: [email protected]
Security Issues: [email protected]
General Support: [email protected]
Response Time: We aim to respond to all privacy inquiries within 48 hours.
By using AMOSKYS, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.