Privacy Policy

Last updated: May 16, 2026

1. Overview

1.1 This Privacy Policy explains how Cyber Eagle LLC ("Cyber Eagle," "we," "us") collects, uses, and shares information when you use our employee productivity and workforce analytics service (the "Service").

1.2 Cyber Eagle is built for organizations that want a clear picture of how work gets done. This Policy applies to two groups: our customers (the businesses that purchase the Service) and the end users — typically employees — whose activity is monitored through the Service at the direction of those customers.

2. Information we collect

2.1 Account information. When a customer signs up, we collect basic account details: company name, administrator name and email, billing address, and payment information (processed by our payment provider).

2.2 Workforce analytics data. Once the Cyber Eagle agent is installed on a workstation, we collect the data the customer has configured the Service to monitor. Depending on the customer's settings, this may include:

2.2.1 Active application and window titles

2.2.2 Web addresses visited (URLs and domains)

2.2.3 Productive vs. idle time

2.2.4 Periodic desktop screenshots

2.2.5 Keystroke and mouse activity counts (not the contents of what is typed)

2.2.6 Device hardware identifiers, IP address, and basic network information

2.3 Website data. When you visit cybereagle.co, we collect standard server log data (IP address, browser type, pages viewed) and use a small number of cookies to keep you signed in, remember preferences, and measure site performance.

3. How we use information

3.1 We use the information we collect to:

3.1.1 Provide, maintain, and improve the Service

3.1.2 Process payments and manage subscriptions

3.1.3 Communicate with customers about their account, security, and product updates

3.1.4 Detect, prevent, and respond to technical issues, fraud, or abuse

3.1.5 Comply with legal obligations

3.2 Workforce analytics data is processed on behalf of our customers. We do not use it for our own marketing or product analytics except in fully anonymized and aggregated form.

4. The role of the customer (employer)

4.1 When the Service is deployed inside an organization, the customer (employer) is the data controller of the workforce analytics data, and Cyber Eagle acts as the processor. Customers are responsible for:

4.1.1 Providing notice to their workforce about monitoring, where required by law

4.1.2 Configuring the Service in compliance with applicable laws and any agreements with their employees

4.1.3 Defining who within the organization can view monitoring data

4.2 If you are an employee with questions about how your employer uses Cyber Eagle, please contact your employer's HR or IT team directly.

5. Sharing and disclosure

5.1 We do not sell personal information. We share information only with:

5.1.1 Subprocessors that help us operate the Service — including cloud hosting, payment processing, error monitoring, and customer support. Our current list of subprocessors is published on our website.

5.1.2 Legal and safety disclosures where required by law, court order, or to protect rights, property, or safety.

5.1.3 Business transfers — if Cyber Eagle is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. Customers will be notified in advance.

6. Data retention

6.1 We retain workforce analytics data for the period configured by the customer, up to a default of 12 months. Customers may shorten or extend this period within the limits of their subscription. Account and billing records are kept for as long as the account is active, plus a reasonable period thereafter to meet legal and accounting obligations.

6.2 Screenshots and other captured media are automatically deleted at the end of the retention window.

7. Security

7.1 We protect your information with industry-standard controls, including:

7.1.1 TLS 1.3 in transit and AES-256 at rest

7.1.2 Role-based access controls and single sign-on (SAML / OIDC)

7.1.3 Continuous logging, monitoring, and anomaly detection

7.2 No system is perfectly secure, but we work hard to keep yours safe and to respond rapidly to any incident.

8. Your rights

8.1 Depending on where you live (for example, the EU and UK under the GDPR, or California under the CCPA), you may have rights to access, correct, delete, export, or object to the processing of your personal information, as well as the right to withdraw consent where processing is based on it.

8.2 For workforce analytics data, please direct these requests to your employer (the data controller). For account or website data, contact us at privacy@cybereagle.co and we will respond within 30 days.

9. International data transfers

9.1 Cyber Eagle is based in the United States. If you access the Service from outside the U.S., your information will be transferred to, stored, and processed in the U.S. and other countries where we or our subprocessors operate. Where required by law, we rely on standard contractual clauses and other approved transfer mechanisms to protect your information.

10. Children's privacy

10.1 The Service is not intended for individuals under the age of 16, and we do not knowingly collect personal information from anyone under 16. If you believe a minor has provided us with personal information, please contact us at privacy@cybereagle.co.

11. Changes to this Policy

11.1 We may update this Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, if the changes are material, provide additional notice through the Service or by email.

12. Contact us

12.1 If you have questions about this Privacy Policy or our data practices, contact us at:

12.2 Cyber Eagle LLC — privacy@cybereagle.co