Back to Home

Privacy Policy

Last updated: December 17, 2025

1. Introduction

CyberDrill ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cybersecurity drill platform.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, organization name, job title
  • Organization Data: Industry, size, security frameworks, critical assets
  • Drill Data: Exercise scenarios, participant information, findings, improvements
  • Payment Information: Processed securely through Stripe; we do not store card details

2.2 Automatically Collected Information

  • Browser type and version
  • Operating system
  • IP address
  • Usage patterns and feature interactions
  • Session duration and frequency

3. How We Use Your Information

We use collected information to:

  • Provide and maintain the Service
  • Process transactions and manage subscriptions
  • Send drill reminders and notifications
  • Generate reports and analytics
  • Improve our Service and develop new features
  • Provide customer support
  • Detect and prevent fraud or abuse

4. Information Sharing

We do not sell your personal information. We may share information with:

  • Service Providers: Third parties who assist in operating our Service (e.g., Stripe for payments, email providers)
  • Benchmarking: Anonymized, aggregated data for industry comparisons (only if you opt-in)
  • Legal Requirements: When required by law or to protect our rights
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

5. Data Security

We implement industry-standard security measures including:

  • Encryption in transit (TLS) and at rest
  • Regular security assessments
  • Access controls and authentication
  • Audit logging of sensitive operations

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. After account termination, we retain data for up to 90 days for backup purposes, then permanently delete it. You may request earlier deletion by contacting us.

7. Your Rights

Depending on your location, you may have the right to:

  • Access: Request a copy of your personal data
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your data
  • Portability: Export your data in a machine-readable format
  • Objection: Object to certain processing activities
  • Restriction: Request restricted processing of your data

To exercise these rights, contact us at privacy@cyberdrill.handvantage.com.

8. Cookies and Tracking

We use essential cookies for authentication and session management. We may use analytics cookies to understand how users interact with our Service. You can control cookies through your browser settings.

9. Children's Privacy

Our Service is not intended for individuals under 18. We do not knowingly collect information from children. If we learn we have collected such information, we will delete it promptly.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or through the Service. Your continued use after changes constitutes acceptance of the updated policy.

12. Contact Us

For questions or concerns about this Privacy Policy or our data practices:
Email: privacy@cyberdrill.handvantage.com
Address: CyberDrill, Handvantage Inc.

13. Additional Rights for EU/EEA Residents (GDPR)

If you are in the EU/EEA, you have additional rights under GDPR. Our legal basis for processing includes contract performance, legitimate interests, and consent where applicable. You may lodge a complaint with your local data protection authority.

14. California Privacy Rights (CCPA)

California residents have additional rights under CCPA, including the right to know what personal information is collected and the right to opt-out of the sale of personal information. We do not sell personal information.