Legal
Privacy policy
What this site collects, why, how long it is kept, and how to make us delete it. Written to be read rather than to be survived.
Last updated 8 August 2026
Who is responsible
CyberSwarm, Inc. operates this site. We are the data controller for the personal data described below, which means we decide why it is collected and what happens to it.
Write to office@cyber-swarm.net for anything on this page, including a request to see, correct or delete what we hold. A person reads that address.
TO CONFIRM: registered address, company number, and whether an EU representative under Article 27 of the GDPR has been appointed for the European operations.
What we collect
Only two things, and one of them is optional.
- What you type into the contact form: your name, your e-mail address, your organisation if you give it, the subject you pick, and your message. Nothing else is asked for and nothing else is inferred.
- Aggregate page statistics: which pages were viewed, roughly where in the world from, which site referred the visit, and what kind of device. This is counted without cookies and without anything that identifies you.
Why we are allowed to
For the contact form, the lawful basis is your consent, given by choosing to write to us, and our legitimate interest in answering. If you write to us about a commercial matter, the basis becomes steps taken at your request before entering a contract.
For the aggregate statistics, the lawful basis is our legitimate interest in knowing whether the site works. Because nothing personal is stored, this does not require consent under the ePrivacy rules.
Photographs of our people
The company page carries photographs of the people who work here, with their names and roles. A photograph of an identifiable person is personal data, so each one is published with that person’s agreement and for no purpose beyond saying who we are.
Anyone pictured can ask to be removed at any time, without giving a reason, by writing to the address above. We will take the photograph down rather than discuss it, and that remains true after someone has left the company.
Where it goes
We are a United States company with engineering operations in Romania, so personal data reaches both. Transfers out of the European Economic Area rely on the European Commission’s standard contractual clauses with each supplier.
How long we keep it
Contact enquiries are kept for as long as the conversation is live, and for two years afterwards, so that we can pick up a thread that goes quiet and comes back. After that they are deleted.
Aggregate statistics are kept for six months and contain nothing that could be traced to a person.
What you can make us do
Under the GDPR, and under comparable rules in California and elsewhere, you can require us to act. We will answer within thirty days and we will not charge you.
- Tell you exactly what we hold about you, and give you a copy.
- Correct anything that is wrong.
- Delete it. If you ask, we delete it, unless we are legally required to keep it.
- Stop processing it, or object to us doing so on legitimate interest grounds.
- Receive it in a portable format so you can take it elsewhere.
- Complain to a supervisory authority. In Romania that is the ANSPDCP; in other member states, your national authority.
How it is protected
The site is served only over HTTPS, with strict transport security, a content security policy and clickjacking protection enabled at the edge. The contact endpoint validates and limits what it accepts.
No system is beyond compromise. If a breach affects your personal data and puts you at risk, we will tell you and the relevant authority, within the timescales the law sets.
Children
This site is aimed at businesses and investors. It is not directed at children and we do not knowingly collect anything from them.
Changes
This policy was last updated on 8 August 2026. If it changes materially, the date changes with it, and anything that affects what we do with data already collected will be raised with the people it affects rather than quietly published.