Privacy Statement

1. Introduction

At DeshCyber, a division of Desh Technology Inc., we are committed to protecting your privacy and data security. This Privacy Statement explains how we collect, use, store, and protect our personal and business-related information when you interact with our website, services, solutions, and cybersecurity offerings.

Our commitment to data security, transparency, and compliance aligns with the highest cybersecurity and regulatory standards, including GDPR, CCPA, PCI DSS, SWIFT CSP, ISO 27001, and FedRAMP.

You agree to the terms outlined in this Privacy Statement by accessing our website or engaging with our services.

2. Information We Collect

We collect different types of personal and business information to provide secure and effective cybersecurity services:

A. Information You Provide Directly:

• Contact Information: Please provide your name, email address, phone number, company name, and job title when you fill out forms, subscribe to newsletters, or contact us.
• Billing & Payment Information: We collect payment details via secure and PCI DSS-compliant payment processors when purchasing services.
• User Account Information: If you create an account, we store login credentials, security preferences, and communication settings.

B. Information Collected Automatically:

• Website & Platform Usage: IP address, device type, browser type, cookies, and analytics data to improve user experience and security.
• Cybersecurity Incident Logs: If you use our AI-based threat intelligence, compliance automation, or SOC services, we process network traffic logs, security events, and user activity data strictly with security regulations.

C. Information from Third Parties:

• Partner & Vendor Data: We may receive cybersecurity-related intelligence from Cisco, Splunk, Red Hat OpenShift AI, and other technology partners to enhance security.
• Threat Intelligence Feeds: To strengthen GRC, fraud detection, and AI-driven cybersecurity, we process anonymized threat intelligence from third-party security vendors.

3. How We Use Your Information

We use your data to deliver enterprise-grade AI-powered cybersecurity services, protect businesses from threats, and comply with industry standards.

• ✅Cybersecurity & Compliance Services: Deliver AI-driven risk management, security automation, and compliance solutions.
• ✅Threat Detection & Prevention: Use AI-based real-time monitoring, security automation, and incident response.
• ✅Customer Support & Engagement: Provide technical support, respond to inquiries, and enhance customer experience.
• ✅Regulatory & Legal Compliance: Ensure compliance with GDPR, CCPA, PCI DSS, SWIFT CSP, ISO 27001, and FedRAMP.
• ✅Fraud Prevention & Security Research: Improve AI-driven cyber threat intelligence and financial security solutions.

We DO NOT SELL OR SHARE personal information with third parties for marketing purposes.

4. Data Protection & Security Measures

We implement industry-leading security measures to protect data integrity:

• ✔AI-Based Security Architecture: Real-time AI-driven cybersecurity monitoring for data protection.
• ✔End-to-End Encryption: All sensitive data is encrypted using AES-256 and TLS 1.3 encryption.
• ✔Zero Trust & Access Control: Strict identity and access management (IAM) policies to prevent unauthorized access.
• ✔Data Minimization & Anonymization: We store only essential data, anonymizing security logs where applicable.
• ✔ISO 27001 & PCI DSS Compliance: We regularly audit security infrastructure for compliance with global standards.

5. Data Sharing & Third-Party Partners

We may share anonymized security data with:

• Regulatory Authorities & Law Enforcement – To comply with legal obligations.
• Cybersecurity Research Organizations – To improve AI-driven threat detection.
• Trusted Technology Partners – Cisco, Splunk, OpenShift AI, and other vendors under strict security agreements.

We DO NOT sell personal data to third parties.

6. Your Rights & Control Over Your Data

Depending on your location, you may have rights under GDPR, CCPA, and other privacy laws:

• 🔹Right to Access – Request a copy of your data.
• 🔹Right to Rectification – Correct inaccurate or outdated information.
• 🔹Right to Deletion – Request deletion of non-essential data.
• 🔹Right to Object – Restrict processing of personal data for marketing purposes.
• 🔹Right to Data Portability – Transfer your data to another service provider.

7. Cookies & Tracking Technologies

Our website uses cookies and analytics to improve security, performance, and user experience.

• Essential Cookies: Required for secure authentication and service functionality.
• Performance Analytics: Used to monitor site traffic & detect security threats.
• Third-Party Integrations: We use Google Analytics, LinkedIn Insights, and cybersecurity threat feeds.

8. International Data Transfers

As a global cybersecurity company, we may transfer data to secure cloud environments within ISO 27001-certified data centers. All transfers comply with GDPR and U.S. data protection regulations.

9. Changes to This Privacy Policy

We may update this Privacy Policy as technology, regulations, or services evolve. Significant changes will be communicated via email or website notices.

10. Contact Us

• 📌Company Name: DeshCyber (a division of Desh Technology Inc.)
• 📍Address: 7409 37th Ave, Suite #203, Queens, NY 11373
• 📧Email: info@deshcyber.com
• 🌐Website: www.deshcyber.com