Spydra Technologies Pvt Ltd ("we", "us", "our") is committed to protecting the privacy of users of the TruSec platform. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you access trusec.io or use our services.

1. Who We Are

TruSec is operated by Spydra Technologies Pvt Ltd, a cybersecurity technology company. Our platform serves security professionals worldwide. For privacy enquiries, you may contact us at [email protected].

2. Information We Collect

2.1 Information You Provide

• Account registration details: name, email address, organization name, and role
• Billing and payment information (processed via our third-party payment provider; we do not store card details)
• Queries, inputs, and conversations submitted to TruSec
• Support requests and feedback you provide

2.2 Information Collected Automatically

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Usage data: pages visited, features used, query patterns, and session duration
• Log data: timestamps, errors, API calls, and performance metrics
• Cookies and similar tracking technologies (see our Cookie Policy)

2.3 Information from Third Parties

We may receive information about you from third-party authentication providers (e.g., SSO providers) or threat intelligence data sources you authorize us to connect with.

3. How We Use Your Information

We use your personal information for the following purposes:

• Providing and operating the TruSec platform and its features
• Authenticating your identity and managing your account
• Processing payments and managing subscriptions
• Improving platform accuracy, AI model performance, and threat intelligence quality
• Sending service-related communications, security alerts, and product updates
• Complying with legal obligations and enforcing our Terms
• Detecting and preventing fraud, abuse, and security threats

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases:

Legal Bases

• Contract performance — to provide the services you have subscribed to
• Legitimate interests — to improve the platform, ensure security, and prevent abuse
• Legal obligation — to comply with applicable law
• Consent — where you have provided explicit consent (e.g., for optional analytics)

5. Data Sharing & Disclosure

We do not sell your personal data. We may share your information with:

• Service providers: cloud hosting, payment processors, analytics providers, and customer support tools — bound by data processing agreements
• Threat intelligence partners: aggregated, anonymized query data may be shared with our threat intelligence feed partners to enhance data quality
• Legal authorities: where required by law, court order, or to protect the rights and safety of Spydra Technologies Pvt Ltd or others
• Business transfers: in the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity

6. Data Retention

We retain your personal data for as long as your account is active and for a reasonable period thereafter to fulfill our legal and contractual obligations. Query and conversation data is retained for up to 12 months by default, or as configured in your Enterprise Data Agreement. You may request deletion of your data at any time (subject to legal retention requirements).

7. Data Security

We implement industry-standard security controls to protect your data, including encryption in transit (TLS) and at rest, access controls, audit logging, and regular security assessments. Given that TruSec serves security professionals, we hold ourselves to a high standard of security practice — but no system is completely immune to risk.

8. International Data Transfers

TruSec is operated globally, which means your data may be processed in countries outside your home country. Where such transfers occur, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs) to ensure your data receives adequate protection.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

AccessRequest a copy of personal data we hold about you

RectificationCorrect inaccurate or incomplete data

ErasureRequest deletion of your data ("right to be forgotten")

RestrictionLimit how we process your data

PortabilityReceive your data in a machine-readable format

ObjectionObject to processing based on legitimate interests

Withdraw ConsentWhere processing is consent-based, withdraw at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Children's Privacy

TruSec is not directed at children under 18. We do not knowingly collect personal data from minors. If we become aware that a minor has provided us with personal data, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the TruSec platform at least 14 days before taking effect. Your continued use of the platform after such notice constitutes acceptance of the updated policy.

12. Contact & Data Controller

For privacy-related questions, access requests, or complaints, please contact: