Privacy Policy

Cybroscape Technologies ("Cybroscape", "we", "us", "our") respects your privacy. This Privacy Policy explains what personal data we collect through this website (cybroscape.com) and our products, how we use it, who we share it with, how long we keep it, and the rights you have. It is designed to meet the material requirements of the EU General Data Protection Regulation (GDPR), the UK GDPR, and India's Digital Personal Data Protection Act, 2023 (DPDP).

1. Who we are

Cybroscape Technologies is an AI-first Life Sciences Validation, Regulatory Compliance and Clinical Technology company. Our head office is in Theni, Tamil Nadu, India, with offices in the Netherlands and Delaware, United States. You can reach us at [email protected].

2. Data we collect

2.1 Data you give us directly

• Contact details when you email us, submit an enquiry, or request a demo — name, work email, employer, role, country and the content of your message.
• Booking details when you schedule a meeting through our Cal.com booking widget — name, work email, time zone, and any details you add to the booking form.
• Recruitment information you send when applying for a role — CV/resume, cover letter, right-to-work details, and links to professional profiles.

2.2 Data we collect automatically

• Usage data via Google Analytics 4 — pages viewed, session duration, referrer, device and browser type, and an anonymised IP address. We enable IP anonymisation and do not use Google Signals or advertising features.
• Essential cookies required for the site to function.
• Server logs generated by our hosting provider for security and abuse prevention.

2.3 What we do not collect

We do not knowingly collect personal data of children under 16 (or under 18 where local law requires). We do not build advertising profiles, we do not sell personal data, and we do not enrich the personal data you send us with data brokers.

3. How we use your data

• To respond to enquiries and run product demos (legal basis: legitimate interests / performance of pre-contract steps at your request).
• To evaluate job applications (legal basis: pre-contract steps at your request).
• To operate, secure and improve the site (legal basis: legitimate interests).
• To comply with legal, tax and regulatory obligations that apply to us (legal basis: legal obligation).

4. How we share your data

We share personal data only with the processors we need to operate the business, under written data-processing terms. Today these include:

• Our hosting and CDN provider, to serve this website.
• Google (Analytics 4), for aggregated site analytics with IP anonymisation.
• Cal.com, for demo scheduling.
• Our email provider, to receive and reply to your messages.

We do not sell personal data. We only disclose personal data to authorities or third parties outside this list when we are legally compelled to do so, or with your explicit instruction.

5. International transfers

Because we operate across India, the European Union and the United States, personal data you send us may be processed in any of those jurisdictions. Where personal data leaves the EEA / UK, we rely on the European Commission's Standard Contractual Clauses (with the UK Addendum where relevant) and take additional safeguards as required.

6. How long we keep data

• Enquiries and demo requests: up to 24 months after the last interaction, then deleted or anonymised.
• Recruitment data: up to 12 months after the recruitment decision, unless you ask us to retain longer.
• Analytics data: retained by Google Analytics 4 for 14 months, then automatically deleted.
• Contract, tax and accounting records: for the periods required by applicable law.

7. Your rights

Depending on where you are located, you have some or all of the following rights:

• Access to the personal data we hold about you.
• Correction of inaccurate or incomplete data.
• Deletion ("right to be forgotten") where the legal basis for processing no longer applies.
• Restriction of processing.
• Portability of data you provided to us, in a structured, commonly used format.
• Objection to processing based on legitimate interests.
• Withdrawal of consent, where consent was the legal basis.
• Under DPDP, the right to nominate another individual to exercise these rights on your behalf.

To exercise any of these rights, email [email protected]. We respond within 30 days (or the shorter period required by local law). You also have the right to lodge a complaint with your local supervisory authority — in the EU your national data-protection authority, in the UK the Information Commissioner's Office, and in India the Data Protection Board of India.

8. Security

We apply engineering, operational and access controls appropriate to the sensitivity of the personal data we hold — including encryption in transit, least-privilege access to systems that hold personal data, MFA for administrative accounts, logging and monitoring, and a defined incident-response process. No system is perfectly secure; if we discover a breach affecting your personal data we will notify you and any relevant authority as required by law.

9. Cookies

This site uses only essential cookies and Google Analytics 4 in anonymised mode. We do not run marketing or advertising cookies. When we introduce any non-essential cookie, we will present a consent banner and record your choice.

10. Automated decision-making

We do not use your personal data for solely automated decisions that produce legal or similarly significant effects on you. Our AI products process customer data under the terms of a separate customer agreement, not under this website Privacy Policy.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Effective" date at the top of the page shows when the current version took effect. Material changes will be highlighted on this page and, where required, communicated to you directly.

12. Contact

For any privacy question, exercise of rights, or concern: [email protected].