Privacy Policy

1. Who We Are

CyberGuardian is an enterprise endpoint detection and response platform developed and operated by CyberGuardian Security EOOD, registered in Bulgaria, EU. We are a data controller under the General Data Protection Regulation (GDPR).

Contact: support@cyberguardian.bg

2. Data We Collect

2.1 License & Payment Data

• Email address (for license management and communication)
• Payment information (processed securely via Stripe — we do not store card data)
• License key and activation status

2.2 Agent Telemetry

• Hostname of the protected machine
• Local IP address
• Installed agent version
• CPU usage (%)
• RAM usage (%)
• Disk usage (%)

This data is sent every 5 minutes to our servers and is used solely for device status monitoring and license management.

3. Legal Basis for Processing

• Contract performance — processing necessary to deliver the CyberGuardian service
• Legitimate interests — improving threat detection, platform security

4. Data Retention

• License data: retained for the duration of your subscription + 2 years
• Agent telemetry: 90 days
• Payment records: 7 years (legal obligation under Bulgarian Accounting Act)

5. Data Sharing

We do not sell your data. We share data only with:

• Stripe — payment processing (PCI DSS compliant)
• Railway — cloud infrastructure hosting (EU data centers)

6. Your Rights Under GDPR

• Right of access — request a copy of your data
• Right to rectification — correct inaccurate data
• Right to erasure — request deletion of your data
• Right to portability — receive your data in machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to restriction — restrict processing in certain circumstances

To exercise any right, contact: support@cyberguardian.bg. We will respond within 30 days.

7. Security

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Access to production systems is restricted to authorized personnel only. We conduct regular security audits aligned with NIS2 Article 21 requirements.

8. Cookies

We use only technically necessary cookies for the website to function. We do not use advertising or tracking cookies.

9. Changes to This Policy

We will notify you of material changes via email at least 30 days before they take effect. Continued use of CyberGuardian after changes constitutes acceptance.

10. Contact & Complaints

Data Protection Officer: support@cyberguardian.bg

You have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP): www.cpdp.bg