Privacy Policy

How CyberHunter Solutions collects, uses, and protects your information.

Effective Date: January 1, 2025 Last Updated: February 18, 2026

CyberHunter Solutions (“we,” “us,” or “our”) operates the SecurityBox platform and the securitybox.io website. This Privacy Policy describes how we collect, use, and protect information when you use our website and services.

Information We Collect

Information You Provide

  • Contact Information — Name, email address, phone number, and company name when you request a consultation or contact us
  • Account Information — Credentials and preferences when you access the SecurityBox platform
  • Payment Information — Billing details processed through our third-party payment provider; we do not store credit card numbers

Information Collected Automatically

  • Website Analytics — Pages visited, referral source, browser type, device type, and session duration
  • Cookies — We use essential cookies for site functionality and analytics cookies to understand usage patterns

SecurityBox Platform Data

  • Network Telemetry — When SecurityBox-Network is deployed, the appliance processes network traffic metadata within your environment for behavioral risk assessment
  • Cloud Telemetry — When SecurityBox-Cloud is deployed, the platform processes logs and signals from connected cloud services (e.g., Microsoft 365, Azure AD)
  • Endpoint Telemetry — When the SentinelOne XDR add-on is active, endpoint activity data is processed for risk correlation

Important: SecurityBox processes security telemetry to generate risk assessments. We do not access, store, or transmit the content of your files, emails, or communications. All telemetry processing occurs for the sole purpose of behavioral risk analysis and threat detection.

How We Use Information

We use collected information to:

  • Deliver and operate the SecurityBox platform
  • Generate per-host risk scores, behavioral anomaly assessments, and actionable recommendations
  • Produce weekly risk trend reports and executive summaries
  • Communicate about your account, findings, and platform updates
  • Improve our platform, detection capabilities, and services
  • Respond to inquiries and support requests
  • Comply with legal obligations

Data Retention

  • Website analytics data is retained for 12 months
  • Platform telemetry is retained for the duration of your service agreement plus 90 days
  • Risk assessment reports are retained for the duration of your service agreement plus 1 year
  • Contact information is retained until you request deletion or 2 years after last interaction

Data Security

We protect your information through:

  • Encryption in transit (TLS 1.2+) and at rest (AES-256)
  • Role-based access controls with least-privilege principles
  • Regular security assessments of our own infrastructure
  • SOC-level monitoring of all platform components
  • Secure deployment practices for all SecurityBox appliances

Data Sharing

We do not sell your personal information or security telemetry.

We may share information with:

  • Service Providers — Third-party vendors who assist in platform operation (e.g., cloud infrastructure, payment processing), bound by confidentiality agreements
  • SentinelOne — When the XDR add-on is active, endpoint telemetry is shared with SentinelOne for threat detection, subject to their privacy policy
  • Legal Requirements — When required by law, legal process, or to protect the rights and safety of CyberHunter Solutions, our clients, or the public

Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate personal information
  • Delete your personal information
  • Export your data in a portable format
  • Opt out of non-essential cookies and analytics
  • Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at privacy@cyberhunter.com.

Children’s Privacy

Our services are designed for business use. We do not knowingly collect information from individuals under 16 years of age.

Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify active clients of material changes via email. The “Last Updated” date at the top indicates the most recent revision.

Contact

For privacy-related questions or requests: