Privacy Policy

Privacy Summary

Sivvy collects minimal data necessary to provide our security services. We do not sell, rent, or share your personal information with third parties for marketing purposes. Your data is encrypted and stored securely.

1. Introduction

This Privacy Policy explains how Sivvy Security, LLC ("Sivvy," "we," "us," or "our") collects, uses, discloses, and protects your information when you use our website monitoring and IP allowlist services (the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Personal Information

We collect information you provide directly to us:

• Account information: email address, name, password
• Payment information: billing address, payment method details
• Contact information: when you contact support or sales
• Profile information: company name, job title (optional)

Technical Information

We automatically collect certain information:

• IP addresses and location data
• Device and browser information
• Usage data and analytics
• Log files and error reports
• Cookies and similar technologies

Service Data

Information related to your use of our services:

• Monitored website URLs and performance data
• IP allowlist configurations
• API usage and access logs
• Notification preferences and delivery status

3. How We Use Your Information

We use your information to:

• Provide and maintain our security services
• Process payments and manage your account
• Send notifications and alerts
• Provide customer support
• Improve our services and develop new features
• Ensure security and prevent fraud
• Comply with legal obligations
• Send important service updates (required communications)

4. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information only in these limited circumstances:

Service Providers

We may share information with trusted third-party service providers who assist us in:

• Payment processing (Stripe)
• Cloud hosting and infrastructure (AWS)
• Email delivery services
• Analytics and monitoring tools

Legal Requirements

We may disclose information if required by law, legal process, or to protect our rights and users' safety.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption in transit (TLS 1.3) and at rest (AES-256)
• Regular security audits and penetration testing
• Access controls and authentication systems
• Employee training on data protection
• Incident response and notification procedures

6. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Account data: Until account deletion + 30 days
• Monitoring data: According to your plan's retention period
• Payment records: 7 years for tax and legal compliance
• Support communications: 3 years
• Security logs: 1 year

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Receive your data in a machine-readable format
• Objection: Object to certain processing activities
• Restriction: Request limitation of processing

To exercise these rights, contact us at privacy@sivvy.io

8. Cookies and Tracking

We use cookies and similar technologies for:

• Authentication and security
• Preferences and settings
• Analytics and performance monitoring
• Service functionality

You can control cookies through your browser settings. See our Cookie Policy for more details.

9. International Data Transfers

Our services are operated from the United States. If you are accessing our services from outside the US, your information may be transferred to, stored, and processed in the United States.

We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses and adequacy decisions where applicable.

10. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected such information, we will take steps to delete it promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending an email notification to registered users
• Displaying a notice in our dashboard

Your continued use of our services after changes become effective constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: