Overview
At SafeAeon Inc. (“SafeAeon,” “we,” “us,” or “our”), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard personal data when you visit our website (www.safeaeon.com) or use our cybersecurity services.
This policy is intended to align with applicable data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and other applicable regulations.
1. Who We Are
SafeAeon Inc. is incorporated in the State of California, United States, and provides cybersecurity services globally.
Controller and Processor Roles
- For website visitors, marketing interactions, and general inquiries, SafeAeon acts as a data controller.
- For customer data processed as part of our cybersecurity services, SafeAeon typically acts as a data processor, processing data on behalf of our customers under contractual agreements.
If you are located in the European Economic Area (EEA), SafeAeon acts as a data controller for website-related data.
EU Representative (GDPR)
To comply with the GDPR, we have appointed Prighter Group, with its local partners, as our EU Representative for data protection matters within the EU.
You may contact our EU Representative or exercise your data protection rights through our privacy portal:
https://app.prighter.com/portal/safeaeon2. What Personal Data We Collect
We may collect the following categories of personal data:
- Identity Data – Name, job title, company name
- Contact Data – Email address, phone number, mailing address
- Technical Data – IP address, browser type, device type, usage data
- Communication Data – Support inquiries, chat messages, email exchanges
- Account Data – Login credentials and account access information (secured and encrypted)
- Service Data – Logs, alerts, and monitoring data processed on behalf of customers
We do not intentionally collect sensitive personal data unless required to provide contracted services or comply with legal obligations.
3. How We Collect Personal Data
We collect personal data through:
- Direct interactions (contact forms, service onboarding, support requests).
- Automated technologies (cookies, analytics tools, website logs).
- Third-party sources (marketing platforms, partners, publicly available sources).
4. Legal Basis for Processing (GDPR)
Where GDPR applies, we process personal data under the following legal bases:
- Contractual Necessity – To perform services under a contract.
- Legitimate Interests – To secure our systems, improve services, and communicate with clients.
- Legal Obligation – To comply with regulatory requirements.
- Consent – For specific marketing or optional data processing activities.
The legal basis depends on the nature of your interaction with us.
5. How We Use Your Data
We use personal data to:
- Deliver and support cybersecurity services.
- Detect and respond to cyber threats.
- Manage accounts and subscriptions.
- Communicate about services, updates, and events.
- Conduct analytics and improve performance.
- Comply with legal and regulatory obligations.
- Protect against fraud, abuse, and security risks.
We do not sell personal data as defined under the CCPA/CPRA.
7. Data Sharing and International Transfers
We may share personal data with:
- Service providers and technology partners.
- Security vendors and infrastructure providers.
- Legal and regulatory authorities, where required.
- Entities involved in mergers, acquisitions, or corporate restructuring.
Where data is transferred internationally, including to the United States, we implement appropriate safeguards such as:
- Standard Contractual Clauses (SCCs).
- UK Addendum (where applicable).
- Data processing agreements.
- Other legally recognized transfer mechanisms.
We maintain a list of subprocessors available upon request.
8. SMS Communications & Data Handling
When you provide your phone number through our website forms or other interactions with SafeAeon, you may consent to receive SMS messages related to:
- Service updates and notifications.
- Security alerts and incident communications.
- Appointment confirmations or follow-ups.
- Relevant service-related communications.
Message frequency may vary based on your interactions with our services.
Message & data rates may apply depending on your mobile carrier.
Opt-In: By submitting your phone number through our website forms and selecting the SMS consent option, you explicitly agree to receive SMS communications from SafeAeon.
Opt-Out: You may opt out of SMS communications at any time by replying STOP to any message.
Support: For assistance, contact us at [email protected].
Data Usage: We use your phone number solely for the purposes outlined above and to provide relevant service-related communications.
Data Sharing & Security: We do not sell your personal data. We do not share mobile information with third parties or affiliates for marketing or promotional purposes. We may share your data with trusted messaging providers solely to deliver SMS services.
Disclosure: No mobile information will be shared with third parties/affiliates for marketing or promotional purposes. All categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
9. Data Retention
We retain personal data only for as long as necessary to:
- Provide services during the contractual term.
- Comply with legal, tax, and regulatory requirements.
- Support security monitoring and operational integrity.
Retention periods vary depending on the type of data and processing purpose. Marketing communications data is retained until you opt out.
10. Data Security
We implement appropriate technical and organizational measures, including:
- Encryption in transit and at rest.
- Role-based access controls.
- Multi-factor authentication.
- Continuous monitoring and endpoint protection.
- Regular vulnerability assessments and penetration testing.
SafeAeon maintains ISO 27001:2022 and SOC 2 Type 2 certifications within a defined operational scope.
11. Your Privacy Rights
For EU/EEA Individuals (GDPR)
You have the right to:
- Access your personal data.
- Rectify inaccurate data.
- Request erasure.
- Restrict processing.
- Request data portability.
- Object to processing.
- Withdraw consent where applicable.
You also have the right to lodge a complaint with your local supervisory authority.
For California Residents (CCPA/CPRA)
You have the right to:
- Know what personal data is collected.
- Request deletion.
- Request correction.
- Opt out of sale or sharing (we do not sell personal data).
- Non-discrimination for exercising rights.
We respond to verified requests within applicable legal timeframes, typically within 30 days.
To exercise your rights, contact: [email protected]
12. Data Breach Notification
In the event of a personal data breach, we will:
- Notify affected individuals and relevant authorities as required by law.
- Take immediate mitigation steps.
- Review the incident to strengthen controls and prevent recurrence.
13. Automated Decision-Making
We do not engage in automated decision-making that produces legal or similarly significant effects on individuals.
14. Third-Party Websites
Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their policies independently.
15. Children’s Privacy
Our services are intended for professionals and businesses.
We do not knowingly collect personal data from:
- Individuals under 16 in the EEA.
- Individuals under 13 in the United States.
If you believe a child has provided personal data, please contact us.
16. Updates to This Policy
We may update this Privacy Policy from time to time. Updates will be reflected by revising the “Last Updated” date above. Material changes may be communicated via website notice or direct email, where appropriate.
17. Contact Us
SafeAeon Inc.
6701 Koll Center Parkway, Suite 250 Pleasanton, CA 94566, USA
Email: [email protected]
Phone: +1-855-684-1313