IT-SA 2026See the Agentic SOC live at IT-SA 2026, Nuremberg — Hall 9, Booth 9-404. Book a meeting →

Privacy Policy

Last updated April 2026

This privacy policy (“Privacy Policy”) explains how Cyngular Security, Ltd. (“Cyngular” or “Company”), as the controller, collect, receive, use, store and share personal data of Cyngular websites’ visitors, users and prospects (collectively, “Users”) in connection with the Cyngular website at: https://www.cyngular.com and any other websites, microsites, social media pages, blogs, or other similar forums or digital asset, online ads and content, emails or other communications, that Cyngular own or control, which links to this Privacy Policy (collectively “Site/s”) and including in connection with prospects’ participation in events or webinars that Cyngular organize or take part in, and other business initiatives, as further described hereunder (together with the Sites, the “Services”). This Privacy Policy is an integral part of the terms of use of the Site (or any other terms of use governing the use of the applicable Site), which are available at: https://www.cyngular.com (“TOU” together with the Privacy Policy the “Terms”).

1. Applicability

1.1 Users are not under any legal obligation to submit personal data to Cyngular through the Site and/or the Services. If User chooses not to do so, certain Services might not be available to User. It shall be clarified that Cyngular shall process Personal Data solely for the purpose for which the data was lawfully established. Should Cyngular seek to introduce additional purposes and/or to collect additional personal data, it shall obtain the User’s prior consent. However, if such consent is not granted, Cyngular may be unable to provide certain or all of the Services to that User.

1.2 By attempting to use or access, or by using or accessing the Site, User agrees to be bound by the Terms. If User does not agree with the Terms user must not use or access the Site. Users’ acceptance of the Terms will be deemed as Users’ consent to the processing of their personal data for all purposes detailed in this Privacy Policy. To revoke such consent, Users may contact us at [email protected].

1.3 Cyngular may change this Privacy Policy from time to time. Cyngular will seek User’s prior consent to any material changes, if and where this is required by applicable law.

1.4 Any capitalized terms which are not defined herein shall have the meaning assigned to them in the TOU (as applicable).

2. Personal Data Collected by Cyngular

2.1 Cyngular may collect User’s data (including by using third-party services) directly from the User, through User’s interaction with Cyngular’s Services, or through automatic means, third-party services, social media, analytics tools, events, sponsorships, and other business initiatives.

2.2 Information provided by User.

2.2.1 Cyngular may collect any information User provides Cyngular with, including but not limited to:

2.2.1.1 Information provided by User voluntarily, either when using one of the Sites, as made available on the applicable Site and provides information as part of such interaction, for example, when User submits the User’s contact information on the “Get a Demo” page on the Site when pressing the “submit” button (or any other similar button on such page), including but not limited to User’s name, surname, email address, phone number, employer’s name and job title or when User interacts with our Services, for example when attending an event or a webinar organized by Cyngular. User may share information such as User’s interests, preferences and insights relevant to the potential engagement with us (e.g., chats, surveys, feedbacks, calls and video recordings, transcriptions, and analyses thereof).

2.2.1.2 Any communication between User and Cyngular, directly through the Services or indirectly through Cyngular’s business partners including in connection with our business initiatives (whether via emails, phone conversations, social media channels, feedback, in-person or virtual events etc.).

2.3 Information collected automatically.

Cyngular may automatically collect data when User visits, interacts with, or uses the Sites, including but not limited to:

  • Identifiers and information contained in cookies;
  • User’s settings preferences, backup information;
  • Content User viewed or searched for, page response times, and page interaction information (such as scrolling, clicks, and mouse-overs);
  • Network and connection information, such as the Internet protocol (IP) address and information about User’s Internet service provider;
  • Device information, such as browser type and version, operating system, or time zone setting; location of the device, encounters with other devices using the Site.

3. Cyngular’s Use of Personal Data

3.1 Cyngular may process User’s personal data to operate, provide, and improve the Services including but not limited to:

  • As necessary for providing and performing the Services;
  • Contacting User and communicating with User with respect to the Services;
  • Identifying User’s interests and recommending offers that might be of interest to User;
  • Marketing and promoting Cyngular’s Services and other offerings;
  • Providing assistance, notification and support;
  • Fulfilling User requests; meeting contractual or legal obligations;
  • Protecting Users security, e.g. preventing and detecting fraud;
  • Internal purposes, e.g. development, control and operation of the Services, trouble shooting, data analysis, testing and statistical purposes.

3.2 Except as provided herein, Cyngular does not use any personal data obtained hereunder, without obtaining User’s prior consent.

3.3 In case User’s Personal Data contains third party personal data, User represents and warrants that it has obtained any consent required from such third party pursuant to and in accordance with this Privacy Policy.

4. Cookies and Third-Party Services

4.1 Cyngular and certain of its service providers may use tracking mechanisms such as cookies on the Sites so that Cyngular may:

  • Facilitate and customize the User’s experience of the Sites;
  • Track User’s use of the Sites.

4.2 A cookie is a small text file that is stored on a User’s computer for record-keeping purposes which contains information about that User. Most browsers automatically accept cookies, but User may be able to modify its browser settings to decline cookies. Please note that if User declines or deletes these cookies, some parts of the applicable Site may not work properly. This Privacy Policy does not apply to any products, services, websites, links or any other content that may be offered by third parties on the Sites (e.g., pop-up additions). The cookies that Cyngular uses on the Sites and within the Services are as listed on the Site.

4.3 By clicking on a link to a third-party website or service on the Sites, a third party may also transmit cookies to User. This Privacy Policy does not cover the use of cookies by any third parties, and Cyngular is not responsible for such third parties’ privacy policies and practices. Cyngular does not have any control over any third parties’ privacy practices, or the technology used by any third parties in order to collect any personal data. Each User is advised to thoroughly review such third parties’ privacy policies before making any use of such third party’s products and services.

4.4 When clicking on certain social media links provided on the Site (e.g. LinkedIn) User will be transferred to Cyngular’s sites on such social media (“Social Media Sites”). It shall hereby be clarified that such Social Media Sites are governed by the terms of use and privacy policy of the respective social media and not by Cyngular.

4.5 Without derogating from the foregoing, please note that the Company may use the following third party service providers, for collecting certain personal data about Users, on Company’s behalf: Google Analytics: We use Google Analytics to analyze marketing goals and to integrate different data sources together. Please click on www.google.com/policies/privacy/partners/ in order to find out how Google Analytics collects and processes data. Further information about Users’ option to opt-out of such analytics services is available at: https://tools.google.com/dlpage/gaoptout.

5. Sharing Personal Data of User

5.1 Cyngular may disclose, without notification, personal data in the following cases:

  • Provide Users with the Services;
  • Where User provides his consent;
  • Comply with applicable laws or regulations;
  • Comply with a court order, subpoena or other legal process;
  • Respond to a lawful request by a government authority, law enforcement agency or similar government body (whether situated in User’s jurisdiction or elsewhere);
  • Engage with third-party service providers and/or sub-contractors which provide services for Cyngular’s business operations, a list of which can be received upon request (e.g., hosting and server location services, data and cyber security services, internet service providers, operating systems and platforms, text analyzing services, marketing and advertising services, fraud detection, analytics and Cyngular’s business, legal, tax, financial and compliance advisors). Such service providers may have access to personal data, depending on each of their specific roles and purposes in the provision of the Services or other activities, and may only use the data as determined in the Company’s agreements with them;
  • With a third-party event host, personal data collected at events either managed by Cyngular or by a third party. For any event hosted by a third party, the collection and use of all personal data will be governed by the applicable third party’s privacy policy, and the terms provided to Users at the applicable event;
  • Disclose and/or transfer data internally within our affiliates or business partners, for the purposes described in this Privacy Policy or to another entity if Cyngular is acquired by or merged with another entity, if Cyngular sells or transfers a business unit or assets to another entity, as part of a bankruptcy proceeding, or as part of any other similar business transfer;
  • Where Cyngular believes release is appropriate to comply with the law, enforce or apply Cyngular’s terms and other agreements, or protect the rights, property, or security of Cyngular, Users, or others. This includes exchanging information with other companies and organizations for fraud prevention and detection and credit risk reduction or any activity that Company believes may be illegal or may expose Company to legal liability;
  • Pursuant to Users’ explicit consent, or if Cyngular is legally obligated to do so, or if we have successfully rendered such data non-personal, non-identifiable and anonymous.

5.2 When Cyngular shares User’s data with third parties as specified above, Cyngular makes reasonable efforts to require such recipients to agree to only process the personal data Cyngular shares with them in compliance with this Privacy Policy and Cyngular’s contractual specifications (e.g., subject to security and other appropriate confidentiality safeguards) and for no other purpose than those determined by Cyngular in line with this Privacy Policy.

6. Direct Marketing and Advertisement

6.1 Cyngular may also send Users advertisements, as such term is defined in the Israeli Media Law (Bezeq and Broadcasting), 1982.

6.2 User can opt out of receiving these direct marketing and/or advertisements from Cyngular at any time by unsubscribing using the unsubscribe link within each communication, or emailing Cyngular at: [email protected], to have User’s contact information removed from Cyngular’s email list.

7. Security

Cyngular has taken appropriate technical and organizational measures to protect the information Cyngular collects about User from loss, misuse, unauthorized access, disclosure, alteration, destruction, and any other form of unauthorized processing. User should be aware, however, that no data protection and security measures can guarantee 100% protection and security of any data stored either with Cyngular or with any third-parties.

8. International Storage and Data Transfer

Each User is advised to be aware that personal data Cyngular collects may be transferred to, processed and stored outside User’s jurisdiction, and that data protection laws in the jurisdiction where the information is collected, stored and/or processed may differ from User’s jurisdiction including in Israel, the EU, the UK, the US and Singapore, as reasonably necessary for the proper performance and delivery of the Cyngular services, or as may be required by law. Each User hereby gives User’s consent to this transfer, processing and storage of User’s information outside its jurisdiction.

9. Retention

Cyngular will retain users’ Personal Data for a period of time consistent with the original purpose of collection (see Section 3, “Cyngular’s Use of Personal Data”). Cyngular determines the appropriate retention period for Personal Data on the basis of the amount, nature and sensitivity of Users’ Personal Data processed, the potential risk of harm from unauthorized use or disclosure of Users’ Personal Data, and whether Cyngular can achieve the purposes of the processing through other means, as well as on the basis of Applicable Data Protection Law requirements (such as applicable minimum statutory retention requirements). After the expiration of the applicable retention periods, Cyngular will delete Personal Data. If there is any data that Cyngular is unable, for technical reasons, to delete entirely from Cyngular’s systems, Cyngular will put in place appropriate measures to prevent any further use of such Personal Data.

10. Database Registration

Certain Personal Data processed by Cyngular may be stored in Cyngular’s registered database, at the Israeli Registrar of Databases. Users are advised, however, that Cyngular is under no obligation to maintain any information, and that Users must not rely on Cyngular’s databases as a backup option.

11. Users in the European Economic Area (EEA) or the UK

11.1 Definition

“Personal Data” means data that may be used, either alone or together with other information, to identify an individual user, including, without limitation, a user’s name, address, telephone number, username, email address, city and country, geolocation, unique identifiers, picture, or other similar information and includes personal data as defined in the General Data Protection Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”).

11.2 Legal Basis for Processing of Personal Data

Cyngular will only process User’s Personal Data if it has one or more of the following legal bases for doing so:

  • Contractual Necessity: processing of Personal Data is necessary to enter into a contract with User, to perform Cyngular’s contractual obligations to User under the TOU, to respond to requests from User, or to provide User with customer support;
  • Legitimate Interest: Cyngular has a legitimate interest to process User’s Personal Data;
  • Legal Obligation: processing of User’s Personal Data is necessary to comply with relevant law and legal obligations, including to respond to lawful requests and orders; or
  • Consent: processing of User’s Personal Data with User’s consent.

11.3 User’s Rights regarding Personal Data

Subject to applicable law, User has certain rights with respect to User’s Personal Data, including the following:

  • User may ask whether Cyngular holds Personal Data about User and request copies of such Personal Data and information about how it is processed;
  • User may request that inaccurate Personal Data is corrected;
  • User may request the deletion of certain Personal Data;
  • User may request Cyngular to cease or restrict the processing of Personal Data where the processing is inappropriate;
  • When User consents to processing User’s Personal Data for a specified purpose by Cyngular, User may withdraw User’s consent at any time, and Cyngular will stop any further processing of User’s data for that purpose.

In certain circumstances, Cyngular may not be able to fully comply with User’s request, such as if it is frivolous or extremely impractical, if it jeopardizes the rights of others, or if it is not required by law; however, in those circumstances, Cyngular will still respond to notify User of such a decision.

User can exercise User’s rights of access, rectification, erasure, restriction, objection, and data portability by contacting Cyngular at [email protected]. In some cases, Cyngular may need User to provide Cyngular with additional information, which may include Personal Data, if necessary to verify User’s identity and the nature of User’s request.

11.4 Transfer of User’s Personal Data outside of the EEA or the UK

The data that Cyngular processes in relation to Users may be transferred to, and stored at a destination outside the European Economic Area (“EEA”) or the UK, e.g. Israel, the US and Singapore, that may not be subject to equivalent data protection law. It may also be processed by staff situated outside the EEA or the UK who works for us or for one of our service providers:

  • In order to store it;
  • Where we are legally required to do so;
  • In order to facilitate the operation of our businesses, where it is in our legitimate interests and we have concluded these are not overridden by User’s rights.

Where Personal Data is transferred by Cyngular or Cyngular’s affiliates in relation to providing the services, Cyngular will take all steps reasonably necessary to ensure that it is subject to appropriate safeguards, such as relying on a recognized legal adequacy mechanism, which may include by entering into European Commission approved standard contractual clauses relevant to transfers of Personal Data and that it is treated securely and in accordance with this Privacy Policy.

UK Users who are not satisfied with the way the Company has responded to their concerns or with the processing of their Personal Data have the right to lodge a complaint with the Information Commissioner’s Office (ICO). Please see the ICO’s website for details of their complaints handling process: https://ico.org.uk/for-the-public.

12. Users in California, USA

To the extent the CCPA is applicable, the following shall apply:

  • The Company will only process Personal Data on User’s behalf.
  • The Company will (i) not collect, retain, use, or disclose Personal Data for any purpose other than for the specific purposes set out in the Privacy Policy, or any other agreement between Company and User; (ii) not sell Personal Information (as defined under the CCPA); and (iii) put in place appropriate technical and organizational measures to protect personal information against unauthorized or unlawful processing or accidental destruction, loss or damage.

13. Users in Israel

Subject to the Israeli Privacy Protection Law, 1981 and its implementing regulations (“Law”), Users have the following rights with respect to User’s personal data processed by the Company, and Company will act in accordance with the Law, to comply with User’s requests to exercise User’s rights:

  • User may ask whether Company holds personal data about User and request copies of such personal data and information about how it is processed;
  • User may request that inaccurate personal data is corrected;
  • User may request the deletion of certain personal data;
  • User may request Company to cease or restrict the processing of personal data where the processing is inappropriate;
  • When User consents to processing User’s personal data for a specified purpose by Company, User may withdraw User’s consent at any time, and Company will stop any further processing of User’s data for that purpose;
  • User may request Company to export the User’s personal data, or to transfer it to a third party, subject to applicable legal requirements.

In certain circumstances, Company may not be able to fully comply with User’s request, such as if it is frivolous or extremely impractical, if it jeopardizes the rights of others, or if it is not required by law; however, in those circumstances, Company will still respond to notify User of such a decision.

User can exercise User’s rights of access, rectification, erasure, restriction, objection, and data portability by contacting Company at the information provided in the “Questions Regarding User’s Personal Data” section below.

14. Children’s Privacy

Cyngular does not knowingly collect or solicit any information from anyone under the age of 18. The Services are not directed at children under the age of 18. In the event that Cyngular learns that it has collected personal data from a child under the age of 18 without consent from a parent or a guardian, Cyngular will delete that personal data as quickly as possible. If User believes that Cyngular might have any information from or about a child under 18, User should contact Cyngular at: [email protected].

15. Use of Google User Data

We use Google user data strictly for the purpose of providing and improving user-facing features within the Cyngular platform. Access to such data is limited to read-only operations required for security analysis, misconfiguration detection, and investigation workflows, as explicitly approved by the customer during onboarding.

We do not use Google user data for any of the following purposes:

  • Targeted advertising or personalized advertising of any kind;
  • Selling data to third parties, data brokers, or information resellers;
  • Retargeting, profiling, or interest-based advertising;
  • Determining credit-worthiness or for lending purposes;
  • Building independent databases unrelated to the service functionality;
  • Training artificial intelligence or machine learning models outside the scope of the customer’s environment and service functionality.

Google user data is processed solely within the context of the customer’s environment and is not shared, sold, or reused beyond the direct operation of the Cyngular platform.

16. Questions Regarding User’s Personal Data

If User has any questions about this Privacy Policy or Cyngular’s privacy and/or data protection practices in general, please contact us using the following information:

Name: Itzik Berrebi, Co-Founder and CTO
Address: Ariel Sharon 4, Givatayim, Israel
Email: [email protected]