Privacy Policy

1. Who we are (the data controller)

AI Cyber Shield is the controller responsible for the personal data described here. You can reach us for any privacy matter — including access, correction, or deletion requests — by email at contact@ai-cyber-shield.com, using the subject line "Data Rights Request." We operate from Israel and process data in accordance with Israeli and EU law. If we are legally required to register a database or appoint a Data Protection Officer, our registration details and DPO contact will be published here.

2. What personal data we collect

Account data: your email address and a password stored only as a salted hash (never in plain text). Usage data: your subscription tier, the URLs you submit for scanning, scan results and history, and product feedback you send us. Technical data: a truncated IP address, browser and device type, and short-lived security logs used to prevent abuse and secure the service.

We do NOT collect payment-card numbers (these are handled directly by PayPal), and we do not intentionally collect special-category / sensitive data (health, biometric, racial, political, religious, or sexual-orientation data) or any data from children under 16. Please do not submit such data to us.

3. Why we collect it (purposes & legal basis)

We use your data ONLY for these purposes: (a) to create and authenticate your account; (b) to run the security and compliance scans you request and deliver their results; (c) to enforce plan quotas and prevent fraud or abuse; (d) to provide support and respond to your requests; and (e) to meet legal obligations such as tax record retention. Our legal bases are performance of our contract with you (GDPR Art. 6(1)(b)), our legitimate interest in securing the service (Art. 6(1)(f)), and legal obligation (Art. 6(1)(c)). Any marketing email is sent only with your consent and can be withdrawn at any time.

4. How long we keep it (retention)

We keep account data for as long as your account is active. Scan history is retained for up to 7 days and then automatically deleted. Security logs are kept for a short period needed to investigate abuse. When you delete your account, we erase your personal data within 30 days, except records we are legally required to retain (for example, invoices for tax purposes).

5. Who we share it with (sub-processors & transfers)

We share data only with service providers that help us operate: Supabase (database & authentication), PayPal (payment processing), and our cloud hosting provider. We do not sell your data or share it for advertising. Where data is transferred outside Israel or the EU, we rely on Standard Contractual Clauses or an adequacy decision to protect it.

6. How we protect it (security)

We apply technical and organizational safeguards appropriate to the risk: encryption in transit (HTTPS/TLS), hashed passwords, row-level access controls so each user can reach only their own data, least-privilege access, and monitoring. No system is perfectly secure, but we maintain a process to detect, contain, and — where legally required — notify a severe security incident to the Privacy Protection Authority and affected users.

7. Your rights

You have the right to access the personal data we hold about you, to correct it if inaccurate, to delete it, to restrict or object to certain processing, and to receive a portable copy. Under Israeli law you may also request review of data held about you. To exercise any right, email contact@ai-cyber-shield.com with the subject "Data Rights Request" — we respond within 30 days. You may also lodge a complaint with the Israeli Privacy Protection Authority or your local EU supervisory authority.

8. Changes to this policy

We may update this policy as the service or the law evolves. Material changes will be posted here with an updated date, and where required we will notify you. Continued use after an update means you accept the revised policy.