Privacy Policy: Defenders Castle AI
1. Introduction
Defenders Castle AI respects your privacy and is committed to protecting your personal data. This policy explains how we handle your information when using our platform. The platform is available to anyone who registers for an account.
2. Information We Collect
2.1 Registration Information:
- Full Name: Account identification
- Email Address: Login and notifications
- Password: Account security (stored encrypted)
- Organization (optional): Display purposes only
2.2 Account Information:
- Account type and registration date
- Feature usage and access logs
2.3 Automatically Collected:
- IP address upon login
- Browser type and operating system
- Login and logout times
- Pages you visit within the platform
2.4 What We Do Not Collect:
- We do not collect data from your network or devices
- We do not track your activity outside the platform
- We do not use tracking tools or advertisements
3. How We Use Your Information
- Creating your account and managing your login
- Managing your account and access
- Sending security alerts you've subscribed to
- Sending important account notifications
- Improving platform performance and user experience
- Complying with legal requirements when necessary
4. Platform Content
All threat intelligence data on the platform is public content available to all registered users. There is no content customized for a specific organization.
5. Data Sharing
We do not sell, rent, or share your personal data with any party for marketing or advertising purposes.
Service Providers:
- Amazon Web Services (AWS): Platform hosting, Frankfurt, Germany
- Cloudflare: Website protection and acceleration
We may disclose your data only if required by a court order or official request from a competent authority.
6. Data Security
- All data encrypted at rest (AES-256) and in transit (TLS 1.3)
- Passwords stored using BCrypt encryption
- JWT authentication with automatic expiration
- Protection against CSRF, XSS, and SQL injection
- Activity log recording all account actions
7. Data Retention
- Active account: Data retained while your account is active
- After account deletion: Data retained 30 days then permanently deleted
- Immediate deletion available via support
8. Your Rights
- Access your personal data
- Correct your data via account settings
- Delete your account and all data
- Export your personal data
- Unsubscribe from alerts at any time
To exercise any of these rights: [email protected]
9. Cookies
Essential cookies only:
- session_token: Maintaining login session
- theme: Theme preference (light/dark)
- language: Language preference (Arabic/English)
No tracking cookies or external analytics.
10. Policy Changes
For significant changes, we will notify you via email and in-platform notification.
11. Contact Us
- Privacy: [email protected]
- Support: [email protected]
- Response time: Within 72 business hours