Privacy Policy

Cyber Nerve Center, Inc. ("Cyber Nerve Center," "we," "us," or "our") provides a continuous-compliance and governance-risk-compliance (GRC) platform. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website or use our services (together, the "Services").

1. Information We Collect

• Information you provide. Contact details (such as name, email, company) when you reach out, request a walkthrough, join our early-access waitlist, or create an account. Waitlist submissions may include the name, email, and a note about the tools you currently use, which we use only to contact you about early access and to inform product development.
• Customer content. Data you submit to the platform, including compliance evidence and control information, processed on your behalf to deliver the Services.
• Usage and device data. Log data, IP address, browser type, and interactions with the Services, collected to operate and improve them.

2. How We Use Information

• To provide, maintain, secure, and improve the Services.
• To communicate with you about your account, inquiries, and updates.
• To monitor security, prevent abuse, and comply with legal obligations.

3. How We Share Information

We do not sell your personal information. We share information only with service providers that help us operate the Services (for example, cloud hosting on Google Cloud) under appropriate confidentiality and data-protection obligations, or where required by law.

4. Data Security

We apply administrative, technical, and organizational safeguards designed to protect information, including encryption in transit and at rest, tenant data isolation, and least-privilege access controls. No method of transmission or storage is completely secure.

5. Data Retention

We retain information for as long as needed to provide the Services and for legitimate business or legal purposes. Customer content is retained per your agreement with us and deleted or returned on termination as described therein.

6. Your Rights

Depending on your location, you may have rights to access, correct, delete, or restrict the processing of your personal information, and to data portability, under laws such as the GDPR and CCPA/CPRA. To exercise these rights, contact us at the address below.

7. Cookies & Consent

Our website uses only essential storage necessary for basic functionality, including remembering your cookie-consent choice. We do not use advertising cookies. Any analytics or other non-essential tracking is disabled by default and loads only after you accept it through the consent banner; you can decline, and nothing non-essential will run.

8. International Transfers

We may process information in the United States and other countries. Where required, we use appropriate safeguards for cross-border transfers.

9. Children's Privacy

The Services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

11. AI Features & Automated Processing

The Services use artificial intelligence and machine learning to generate summaries, risk intelligence, and recommendations. To provide these features, we process Customer Content and usage data. We do not use your Customer Content to train third-party foundation models, and we do not sell your information. AI outputs are assistive and intended to support—not replace—human judgment; see our Terms of Service. Where we rely on third-party AI providers, they process data under contractual confidentiality and data-protection obligations and do not use your data to train their models except as permitted by your agreement with us.

12. Contact Us

Questions about this Policy or our data practices? Email hello@cybernervecenter.com.