This Privacy Policy explains how Cyberdyne Secure Solution LLC ("ZEV", "we", "our", or "us") collects, uses, processes, and protects information when you use our platform at zev.systems, our scanning and assessment tools, and related services (collectively, the "Services"). By using the Services you agree to the practices described here.
1. Information we collect
- Account and contact data you provide — name, work email, organization, role, and billing details.
- Security and assessment data — the domains, IP ranges, and assets you register; scan findings; risk-assessment and audit questionnaire responses; and policy or evidence documents you upload.
- Usage and device data — IP address, browser and device type, and pages visited, collected via cookies and similar technologies.
2. How we use information
To provide, secure, and improve the Services; run the scans, assessments, and audits you request; generate and review documents; deliver training; communicate with you about your account; process payments; and meet our legal and compliance obligations. We do not sell your personal information, and we do not use your security or assessment data to train third-party AI models.
3. Automated and AI-assisted processing
Some features — such as risk assessments, internal audits, and document generation and review — use automated and AI-assisted processing. Content you submit for these features (for example, questionnaire answers and uploaded documents) may be processed by trusted AI sub-processors under contractual confidentiality and data-protection terms, solely to produce your results. A qualified expert reviews assessment and audit output before it is finalized.
4. Legal bases for processing
Where applicable, we process personal data under one or more legal bases: performance of a contract, your consent, our legitimate interests in operating and securing the Services, and compliance with legal obligations.
5. Sharing and disclosure
We share data with sub-processors who help us operate the Services — including cloud hosting and storage, authentication, payment processing, email delivery, AI processing, and product analytics — each bound by data-protection terms. We may also disclose information where required by law or to protect the rights, safety, and security of ZEV, our users, and the public.
6. Data retention
We retain personal data for as long as your account is active and as needed to provide the Services, then delete or anonymize it according to our retention schedule and applicable legal requirements. You may request deletion of your account data as described below.
7. Security
We protect data with encryption in transit and at rest, least-privilege access controls, tenant isolation between organizations, and audit logging of administrative actions. No method of transmission or storage is perfectly secure, but we work continuously to safeguard your information and operate to ISO 27001 and PCI-DSS practices.
8. Your rights
Depending on your location, you may have rights to access, correct, delete, export, or port your data, and to object to or restrict certain processing. To exercise these rights, contact us at [email protected].
9. International transfers
Where data is transferred across borders, we rely on appropriate safeguards — such as standard contractual clauses — to protect it consistent with applicable law.
10. Cookies
We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Services are used. You can control cookies through your browser settings; some features may not work without them.
11. Children's privacy
The Services are intended for organizations and users aged 18 and over. We do not knowingly collect personal information from children.
12. Changes and contact
We may update this policy from time to time; material changes will be posted here with a revised date. Questions about this policy or your data? Contact us at [email protected].