Last updated: 2 October 2026

This Privacy Policy explains how CyberVigilens handles personal information in connection with the SecIncyte platform and the secincyte.com website. SecIncyte is the unified cybersecurity platform from CyberVigilens. We have written this in plain language. If anything is unclear, write to us at privacy@cybervigilens.com.

1. Who we are

SecIncyte is offered by CyberVigilens, at 2nd Floor, 7-1-67/12, Dharam Karan Road, Near Nature Cure Hospital, Ameerpet, Hyderabad, Telangana 500 016, India. In this policy, “we”, “us” and “our” mean CyberVigilens.

2. Two roles: our website and your platform data

This policy covers two different situations, and it is worth keeping them apart.

First, when you visit secincyte.com, request a demo or otherwise deal with us directly, we act as the data controller for your personal information, and this policy describes how we handle it.

Second, when your organisation uses the SecIncyte platform, your organisation is the controller of the data inside the platform, and we act as a data processor. That means your organisation decides what is collected and why, and we process the data on its instructions and under our agreement with it. If you are an employee or user of a customer, the customer’s own privacy notice is the one that governs how your data is used, and you should approach the customer first with any request.

3. Information we collect on the website

When you contact us or book a demo, you may give us your name, work email address, phone number, organisation and role, and the details you include in your message. When you browse the site, our servers record standard technical information such as IP address, browser type, device and operating system, referring and exit pages, and the date and time of your visit. We also use cookies.

4. Cookies and log files

We use cookies and similar technologies to keep the site working, remember your preferences and understand how the site is used. You can control or delete cookies through your browser, though some parts of the site may not work properly if you do. We also keep server log files, which record IP addresses, browser type, internet service provider, timestamps, referring and exit pages, and click activity, and which we use for site administration and to analyse trends.

5. What the platform collects

The SecIncyte platform collects and correlates security and operational data from the environment your organisation chooses to cover. Depending on which modules are enabled, this can include:

• Endpoint and device information, such as host names, operating system and hardware details, and process, file, logon and network activity from the SecIncyte agent.
• Network and infrastructure data, such as flow records, connection history and data from firewalls, switches and server hardware over agentless protocols.
• Identity and access data, such as account and privileged-session activity.
• Asset, vulnerability and configuration data gathered from systems and scans.
• If your organisation enables the workforce and human-risk features, for example the employee activity or monitoring modules, activity data from the covered endpoints.

Some of this data identifies individuals, for example a username in a logon event. The platform also holds the account and access details of the people your organisation authorises to use it.

6. How we use information

We use website information to respond to your enquiries, provide demos, operate and secure the site, send service messages and, where you agree, marketing messages, and meet our legal obligations. We use platform data to provide, support, secure and improve the platform, to deliver the modules your organisation has enabled, to provide support and troubleshooting, and to meet our contractual and legal duties. We do not sell personal information.

7. Legal grounds, and the customer’s responsibilities

Where we act as a controller, we rely on your consent, on the need to perform a contract with you, on our legitimate interest in running secure and effective services, or on a legal obligation. Where the law of your country applies, such as India’s Digital Personal Data Protection Act, 2023 or the EU General Data Protection Regulation, we process personal data only with a lawful ground.

Where we act as a processor, your organisation is responsible for having a lawful basis to collect the data, and for giving any notices and obtaining any consents, or completing any consultations, that the law requires for the monitoring it enables, including where the workforce and employee-monitoring modules are switched on. This is the shared responsibility model: the customer controls the purpose and scope of monitoring, and we provide the platform and process the data on the customer’s instructions.

8. AI-assisted features

Some SecIncyte features use AI to summarise findings, answer plain-language questions about an environment and assist with automation. When you use these features, the relevant data, such as log lines, asset details and the question you type, may be processed to generate the response and to operate and improve the feature. AI outputs are assistance only for your team to review, they are not decisions, and they are provided without any warranty. Automation sessions run in Read-only or Actionable mode according to the permissions and settings your organisation configures, and your organisation decides whether to enable them.

9. Sharing and disclosure

We do not sell or rent personal information. We share it only as needed, with:

• Our personnel and affiliates who need it to operate and support the platform.
• Service providers and sub-processors, such as hosting and cloud infrastructure, email delivery, analytics, support tooling and payment providers, working under contract and on our instructions.
• Professional advisers, and authorities or courts where the law requires it or where it is needed to protect rights, safety or property.
• A buyer or successor in the event of a merger or acquisition.

10. International transfers

We and our service providers may store and process information in India and in other countries. Where personal data is transferred across borders, we take steps to make sure it continues to receive an appropriate level of protection, as required by applicable law.

11. How long we keep information

We keep personal information only as long as we need it for the purposes in this policy, to meet our legal and contractual obligations, to resolve disputes and to enforce our agreements. Platform data is normally retained according to the settings and subscription your organisation configures, and is returned or deleted when the subscription ends, as set out in our agreement. When we no longer need information, we delete it or make it anonymous.

12. How we protect information

We use reasonable technical and organisational measures to protect personal information and platform data. These include encryption in transit, access controls, least-privilege permissions, monitoring, segmentation between tenants, and confidentiality obligations for our staff and providers. No system is completely secure, so we cannot promise absolute security, but protecting your data is central to what we do.

13. Your rights

Depending on where you live and the law that applies, you may have the right to ask for a copy of your personal information, to correct it, to have it erased, to withdraw consent, to object to or restrict certain processing, and to complain. Write to us using the details in section 17 to make a request, and we may need to verify who you are before we act. If your information sits inside a customer’s SecIncyte environment, please contact that organisation first; as the controller, it decides how your information is used, and we will assist it in responding.

14. Children

The platform and this website are for businesses and professional users and are not directed at children. We do not knowingly collect personal information from children. If you believe a child has given us information, please contact us and we will delete it.

15. Links to other websites

This website or the platform may link to third-party sites or services we do not control. This policy does not cover them. Please read their privacy notices.

16. Changes to this policy

We may update this policy from time to time to reflect changes in the platform, our practices or the law. We will post the updated version here and change the date at the top, and we will try to tell you directly if the change is significant. The version posted here is the one that applies.

17. Contact us

If you have questions, concerns or a request about privacy, write to our Grievance Officer at privacy@cybervigilens.com, or use the postal address in section 1. We will look into your concern and respond.

By using this website or the platform, you acknowledge this Privacy Policy.