Privacy Policy

Information You Provide

When you contact us, fill out forms, request a demo, or engage with our services, we may collect your name, email address, phone number, company name, job title, and any other information you choose to provide.

Information Collected Automatically

When you visit our website, we automatically collect certain technical information including your IP address, browser type and version, operating system, pages visited, time spent on pages, referring URLs, and other standard web analytics data. This information is collected through standard web technologies and analytics tools.

Service Data

For TITAN platform and SOC customers, we collect network telemetry, log data, alert data, and other security-related information as part of delivering contracted security monitoring services. This data is collected solely to provide and improve the security services outlined in your service agreement.

We use the information we collect for the following purposes:

To respond to your inquiries, process your requests, and provide information about our services.

To deliver, maintain, and improve our security monitoring, TITAN platform, and SOC services for contracted clients.

To send you relevant communications about our services, industry developments, and security updates. You may opt out of marketing communications at any time.

To comply with applicable legal obligations, enforce our agreements, and protect our rights.

What We Do Not Do

We do not sell, rent, or trade your personal information to third parties. We do not use client security telemetry data for any purpose other than delivering the contracted security services specified in your service agreement. Your security data is your data.

We take the security of your information seriously and implement industry-leading safeguards to protect it:

All data is encrypted in transit using TLS 1.2 or higher and encrypted at rest using AES-256 encryption.

Our security program is built on SOC 2 Type 2 certified controls, independently audited to verify the effectiveness of our security, availability, and confidentiality safeguards.

We enforce role-based access controls and require multi-factor authentication for all personnel accessing client data and internal systems.

We conduct regular security assessments, vulnerability scanning, and penetration testing of our own infrastructure to ensure our defenses remain current and effective.

We retain personal information only as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements.

For security service clients, data retention periods are defined in your service agreement. Retention schedules are designed to balance operational needs with data minimization principles.

You may request deletion of your personal information at any time by contacting us at privacy@skyhelm.com. We will process deletion requests within 30 days, subject to any legal or contractual obligations that require continued retention.

We use a limited number of third-party services for website analytics, business operations, and service delivery. All third-party providers are carefully vetted for their security and privacy practices before engagement.

We do not share client security data with third parties except as strictly required to deliver contracted services or as compelled by law. Where third-party sub-processors are involved in service delivery, they are bound by contractual obligations to protect your data consistent with this policy.

We will never monetize your data or share it with advertising platforms.

You have the right to access, correct, or delete the personal information we hold about you. You may also request a copy of your data in a portable format.

You may opt out of marketing communications at any time by using the unsubscribe link in any email or by contacting us directly.

You may request information about the categories of personal data we have collected about you and the purposes for which it is used.

If you have any privacy concerns or wish to exercise your rights, contact us at privacy@skyhelm.com. We will respond to all requests within 30 days.

We use essential cookies that are necessary for our website to function properly, including session management and security features. These cookies cannot be disabled.

We use analytics cookies to understand how visitors interact with our website, which pages are most visited, and how we can improve the user experience. You may opt out of analytics cookies through your browser settings or our cookie preferences.

We do not use advertising cookies or third-party tracking cookies. We do not participate in cross-site tracking or behavioral advertising programs.

Our website and services are directed to businesses and professionals. They are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected information from a child under 18, we will take steps to delete that information promptly.

We may update this privacy policy periodically to reflect changes in our practices, services, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page and post the revised policy on our website.

For significant changes that affect how we handle your personal information, we will make reasonable efforts to notify you in advance through our website or direct communication. Your continued use of our website and services after changes are posted constitutes acceptance of the updated policy.

If you have questions about this privacy policy, want to exercise your privacy rights, or have concerns about how your information is handled, please contact us: