Privacy Policy

Last Updated: July 7, 2025

IMPORTANT: This Privacy Policy is a template and does not constitute legal advice. You must consult with a qualified legal professional to ensure this policy is compliant with all applicable laws, such as GDPR, CCPA, etc.

1. Introduction

Sova Cyber ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information. Our guiding principle is to collect the minimum amount of data needed to deliver our services and to store it for the minimum amount of time required.

We never sell your data. Period.

2. Information We Collect

We collect information in the following ways:

When you browse our website: We may collect non-personally identifiable information such as your browser type and IP address through standard analytics tools and security services like Google reCAPTCHA.
When you contact us or request an audit: We collect your name, email address, company name, and the domain name you wish to have audited.
When you subscribe to our newsletter: We collect your email address.
During a service engagement: To perform our services, we may require temporary administrative credentials for your DNS provider and email platform. We use secure methods (e.g., delegated access, password managers) to handle this information, and access is revoked or credentials are deleted immediately upon project completion.
For DMARC monitoring services: We process aggregated DMARC reports sent from your domain. These reports contain IP addresses of sending servers and email volumes but do not contain the content of emails or personally identifiable information of the recipients.

3. How We Use Your Information

We use the information we collect solely for the following purposes:

To provide, operate, and maintain our website.
To perform the complimentary email security audit.
To create a Statement of Work and deliver the services you have purchased.
To communicate with you, including responding to inquiries and providing project updates.
To send you our newsletter, if you have opted in.
To improve our website and services.

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to others. We may share information with trusted third-party service providers who assist us in operating our business (e.g., Cal.com for scheduling, Google Workspace for email), but only to the extent necessary to provide our services. These parties are contractually obligated to keep your information confidential and secure.

5. Data Security

We implement a variety of security measures to maintain the safety of your personal information. All sensitive information, such as temporary credentials, is handled through secure, encrypted channels and is deleted upon project completion. We are committed to protecting your data with the same level of care we use to protect our own.

6. Data Retention

We retain your information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Project-related data is securely archived or deleted after a set period following project completion, as defined in our data retention policy.

7. Your Rights

You have the right to request access to, correct, or delete your personal information that we hold. To make such a request, please contact us at the email address below.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at contact@sovacyber.com.