Last updated: January 18, 2026
Cirrusly, Inc. ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cloud security posture management service ("Service").
Account Information — Name and email address; company name and size; payment information (processed securely through third-party payment processors); account credentials.
Cloud Infrastructure Data — Cloud resource configurations and metadata; security findings and vulnerability information; compliance status data; access logs and audit trails.
Usage Information — Log data (IP address, browser type, pages visited); device information; service usage patterns and analytics; cookies and similar tracking technologies.
Provide, maintain, and improve our security scanning services; process transactions and send related information; send administrative information, updates, and security alerts; respond to inquiries and provide customer support; monitor and analyze usage trends and patterns; detect, prevent, and address security issues and fraud; comply with legal obligations and enforce our terms.
All data is encrypted at rest using AES-256 encryption; data in transit is protected using TLS 1.3 or higher; database-level encryption with isolated private schemas; regular security audits and penetration testing; access controls and authentication mechanisms; employee training on data protection and privacy.
We do not sell your personal information. We may share it only with: service providers (payment processing, hosting, analytics); when required by law, court order, or government request; in connection with a merger, acquisition, or sale of assets; to protect our rights, property, safety, or that of our users; or with your explicit consent.
We retain your information for as long as necessary to provide our services and comply with legal obligations. Account data is retained during your active subscription and for a reasonable period after termination. Cloud infrastructure data is retained according to your plan's data retention policy (typically 90 days to 1 year).
Depending on your location: access (a copy of your personal information), correction, deletion, portability, objection, and withdrawal of consent where processing is based on consent. To exercise these rights, contact us at info@cirrusly.ai.
We use cookies and similar technologies to improve your experience, analyze usage, and personalize content. You can control cookies through your browser settings, but disabling them may affect Service functionality.
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place in accordance with this Privacy Policy and applicable data protection laws.
Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through our Service. Your continued use after such modifications constitutes acceptance of the updated policy.
Cirrusly, Inc. — Email: info@cirrusly.ai. For GDPR-related inquiries, you may also contact our Data Protection Officer at the same email address.