Privacy Policy

Last updated: September 28, 2026

1. Who We Are

Cyberbard is operated by an independent, sole-founder software business based in the United Kingdom. We are the data controller for personal information collected through the Service. As a small operation, all privacy inquiries are handled through a single channel: [email protected].

2. Information We Collect

Account Information: Name, email address, and profile picture (if your sign-in provider shares one) when you register, whether directly or through Google or GitHub sign-in. Payments are handled by Stripe; we never see or store your full card details.

Usage Data: Pages scanned, reports generated, and feature usage to improve the Service.

Website Data: URLs and publicly accessible content you submit for testing.

3. How We Use Your Information

• To provide and improve the Service
• To send service emails: your reports, scheduled rescan results, sign-in links, account notices, and billing notices. Report emails include one-click links to stop rescans or unsubscribe.
• To comply with legal obligations

We don't send marketing emails. If we ever do, we'll ask for your consent first.

Our legal bases under UK GDPR are: contract (to provide the Service and its emails), legitimate interests (to keep the Service secure and improve it), consent (for optional analytics cookies), and legal obligation.

4. Data Sharing

We do not sell your personal data. We share data only with:

• Payment processors (Stripe) for billing
• Cloud infrastructure providers (for hosting and storage)
• Our email delivery provider (Purelymail), to send the emails described above
• AI model providers (such as Google Gemini), to analyze the public website content you submit
• Google (Analytics and Ads). Their cookies are set only if you accept them in the cookie banner; if you reject, Google receives only cookieless, aggregated signals

5. International Data Transfers

As a UK-based business, we may transfer your data to service providers located outside the UK and European Economic Area. Where this occurs, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent UK-approved transfer mechanisms.

6. Data Retention

Account data is retained while your account is active, plus 90 days. You may request deletion at any time.

7. Your Rights

Under UK GDPR, you have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing. Contact [email protected] to exercise these rights. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

We use essential cookies for authentication and preference storage. Analytics and advertising cookies (Google) are optional and are set only after you accept them in the cookie banner.

9. Contact

For privacy inquiries, contact us at [email protected].