Privacy notice

CyBarq Technology LLC is a technology company registered in the Hashemite Kingdom of Jordan and based in Amman. For the purposes of this notice, CyBarq is the party responsible for the personal data described here. You can reach us at info@cybarq.com.

When you use the contact form we collect the details you enter: your name, work email address, company and country if you provide them, the service you are interested in, and your message. We also record the date and time of the submission and a one way hash of your IP address, which we use to limit abuse of the form and cannot reverse to identify you.

When you verify a certificate we process the verification code you enter and return only the information printed on that certificate. We do not store the codes you look up beyond the short period needed to limit repeated requests.

Our hosting provider records standard server logs, including IP addresses, browser type and the pages requested, for security and to keep the site running. We do not use advertising trackers or analytics that follow you across other websites.

The CyBarq platform is available to our employees and to client users we have invited. For those accounts we hold the name, email address and role of the user, the records of the projects, engagements, documents and communications they take part in, and an audit log of significant actions with the time, the acting user and the originating IP address. This data is needed to deliver our services and to keep the platform secure.

Files uploaded to the platform, including security reports, project documents and certificates, are stored in private storage and are only available to the users authorised for the record they belong to.

We use contact form data to respond to your enquiry and, where you have asked about our services, to follow up on it. We use platform data to deliver the work we have agreed with our clients, to manage our relationship with them, to meet our legal and contractual obligations, and to protect the platform and its users from abuse. We do not sell personal data and we do not use it for advertising.

The public website sets a cookie that remembers your language preference. The platform and client portal set the cookies needed to keep you signed in during a session. We do not set marketing or third party tracking cookies. You can clear these cookies in your browser at any time; doing so will sign you out of the platform.

The website and platform are hosted on Vercel, and the database, authentication and file storage are provided by Supabase. Both are established infrastructure providers with published security practices, and data is stored in their data centres outside Jordan. Transactional email, such as contact confirmations and account invitations, is sent through Resend. These providers process data on our behalf and under our instructions; they do not use it for their own purposes.

Within CyBarq, access to personal data is limited to the employees who need it for their role and is enforced by permissions in the platform itself.

Contact form submissions are kept for up to 24 months after our last exchange with you, then deleted, unless they led to a client relationship, in which case they become part of that client's records. Platform and portal records are kept for the duration of the client relationship and for the period afterwards that our contractual and legal obligations require. Audit logs are retained for the life of the platform because they are part of how we protect it. Server logs held by our hosting provider are kept for a short rolling period.

You can ask us what personal data we hold about you, ask us to correct it, or ask us to delete it where we no longer need it for the purposes above or for a legal obligation. Client users can also ask their organisation's administrator to update their account. Write to info@cybarq.com and we will respond within a reasonable time.

When we change how we handle personal data we will update this page and the date at the top. Significant changes affecting platform users will also be communicated to them directly.