Cookies Policy
Understanding how we use cookies to improve your experience on DeshCyber's websites and applications.
Cookies Policy for DeshCyber
Effective Date:
4/11/2025
Last Updated:
4/1/2025
Applies To:
www.deshcyber.com, dev.deshcyber.com, and all affiliated subdomains, microsites, and applications.
1. Introduction
("DeshCyber", "we", "our", or "us") is committed to protecting your digital privacy and maintaining transparency regarding the use of cookies and similar technologies across our web properties.
DeshCyber operates as a DBA (Doing Business As) in New York, under the legal entity Desh Technology Inc, a company incorporated in the State of New York, United States. DeshCyber is part of a joint venture between the USA and Bangladesh, delivering AI-driven cybersecurity, compliance, and automation solutions globally.
This Cookies Policy outlines:
- What cookies are
- The types we use
- How we use them
- How we work with third parties
- Your rights and controls
- Our legal compliance framework
We ensure that our cookie usage meets or exceeds the requirements of:
- General Data Protection Regulation (GDPR)
- California Consumer Privacy Act (CCPA/CPRA)
- ePrivacy Directive
- ISO/IEC 27001
- HIPAA (for health data applications)
- AI Governance for Large Language Models (LLMs)
2. What Are Cookies?
Cookies are small data files stored on your browser or device when you visit a website. They allow websites to remember information such as user preferences, login states, or analytics data across sessions.
Cookies can be:
- First-party cookies: set by us
- Third-party cookies: set by integrated third-party tools (e.g., analytics, ad platforms)
Cookies can also be:
- Session cookies: deleted when the browser closes
- Persistent cookies: stored until a defined expiration or manual deletion
3. Types of Cookies We Use
a. Strictly Necessary Cookies
Essential for basic functionality and secure browsing. Examples include:
- Session control
- Load balancing
- Authentication tokens
- Consent log tracking
Legal basis: Legitimate interest / Contractual necessity
b. Performance & Analytics Cookies
Used to understand how users interact with our websites:
- Page load speeds
- Error reporting
- User navigation behavior
Examples: Google Analytics, Hotjar
Legal basis: User consent under GDPR
c. Functionality Cookies
Enhance usability and personalization:
- Language and region preferences
- Accessibility adjustments
- GPT session context memory for personalized AI responses
Legal basis: Consent
d. Marketing & Targeting Cookies
Used to deliver targeted advertising and measure campaign performance:
- Ad pixels (Facebook, LinkedIn, Google)
- Affiliate tracking
- Email click tracking
Legal basis: Explicit user consent
e. AI/LLM Personalization Cookies
We use cookies to support advanced features like:
- Real-time contextual learning for our AI security agents
- Retrieval-augmented generation (RAG) behavior modeling
- In-session GPT personalization
We never use personal data for training without explicit opt-in consent.
Legal basis: Consent + Legitimate interest (pseudonymized, non-identifiable data only)
4. Legal Grounds for Cookie Usage
We rely on the following bases:
- Legitimate Interest: strictly necessary cookies
- User Consent: analytics, marketing, personalization
- Contractual Necessity: authentication and security controls
- Regulatory Obligation: cookie consent tracking for audits
5. Third-Party Cookies
Our platforms integrate services that may set third-party cookies:
| Provider | Purpose | Type |
|---|---|---|
| Google Analytics | Website performance tracking | Analytics |
| Meta (Facebook) | Retargeting and conversion tracking | Marketing |
| LinkedIn Insight | Ad campaign performance | Marketing |
| Cloudflare | CDN and security enhancement | Necessary |
| ChatGPT Plugin | GPT AI session personalization | Functional |
| HubSpot | CRM, forms, and marketing automation | Marketing |
Each provider has its own privacy and cookie policy. We do not control their use of cookies and recommend reviewing their respective terms.
6. Your Choices and Cookie Control
a. Consent Banner on First Visit
We display a cookie consent banner where you can:
- Accept all cookies
- Reject all non-essential cookies
- Customize cookie categories
Your preferences are stored and can be updated anytime.
b. Browser-Level Controls
You may also manage cookies through your browser settings. Refer to the documentation for:
- Chrome: chrome://settings/content/cookies
- Firefox: about:preferences#privacy
- Safari: Preferences > Privacy > Manage Website Data
- Edge: edge://settings/privacy
c. Opt-Out Mechanisms
- Google Analytics Opt-Out Tool
- YourAdChoices Opt-Out
- Network Advertising Initiative
7. Data Subject Rights (GDPR, CCPA)
Under global privacy laws, you have rights regarding any cookie-based data associated with your device or identity, including:
- Right to access
- Right to correction
- Right to erasure
- Right to restrict processing
- Right to object
- Right to opt-out of sale/sharing (CCPA)
- Right to lodge a complaint with a data protection authority
To exercise your rights, email: privacy@deshcyber.com
8. Sale and Sharing of Data (CCPA/CPRA)
We do not sell personal data. However, for California residents:
- Certain cookies (e.g., ad tracking) may be considered "sharing" under CPRA
- You can opt out via our "Do Not Sell or Share My Personal Information" link in the footer
9. Cookies and AI Systems
DeshCyber uses cookies to improve the performance of its AI-based systems. This includes:
- Maintaining in-session context for AI assistants
- Enabling personalized prompts based on prior inputs
- Tracking usage patterns (anonymized) to optimize AI behavior
We do not use personal data for model training unless explicitly authorized.
10. Data Retention and Log Audit
| Cookie Type | Duration |
|---|---|
| Session Cookies | Until browser closes |
| Consent Records | 5 years (for audit) |
| Analytics Cookies | 26 months |
| Marketing Cookies | 6–12 months |
| GPT Context Tokens | Session-based, not persisted |
Consent logs and access to cookies are maintained securely and reviewed annually for PCI-DSS and ISO/IEC 27001 audit compliance.
11. International Transfers
Data collected via cookies may be transferred to and stored in jurisdictions such as the United States or the European Economic Area (EEA). We use:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions (where applicable)
- Enterprise Data Processing Agreements with third parties
12. Cookie Policy for Children
Our services are not directed at individuals under 13. We do not knowingly use cookies to track or profile children.
If you believe we have inadvertently collected data via cookies from a child, please contact us at: privacy@deshcyber.com
13. Policy Updates
We may update this policy periodically to reflect changes in:
- Regulatory frameworks
- AI platform usage
- Partner integrations
You will be notified of material changes via website banner, or email if you are a registered user.
Last Updated: 4/11/2025
14. Contact Information
DeshCyber
A DBA of Desh Technology Inc
7409 37th Avenue, Suite #203
Jackson Heights, NY 11372
United States
Last updated: October 31, 2026
