Home / Privacy Policy

Privacy Policy

Last updated: May 26, 2026 · Effective: May 26, 2026

Summary: Cybernetic Research AI collects only the information necessary to respond to inquiries and deliver its services. We do not sell user data. We do not use tracking cookies. We operate with security-first principles across all data handling.

1. Who We Are

Cybernetic Research AI ("we," "our," or "us") is a cybersecurity research firm providing penetration testing, red team operations, vulnerability research, AI security research, and threat intelligence services. Our website is cyberneticresearch.ai.

For privacy-related questions, contact us at: contact@cyberneticresearch.ai

2. Information We Collect

We collect information only in two ways:

  • Information provided voluntarily: When a user submits our contact form, we collect their name, email address, organization (optional), service interest, and message content. This information is used solely to respond to that inquiry.
  • Automatically collected technical data: Our web server logs basic access information including IP address, browser type, referring URL, and page requested. This data is retained for up to 30 days for security and operational purposes and is not linked to any personal profile.

We do not use advertising trackers, third-party analytics scripts, behavioral profiling tools, or any cross-site tracking technologies.

3. How We Use Collected Information

Information collected through the contact form is used exclusively to:

  • Respond to the inquiry or service request
  • Communicate relevant details about our services
  • Follow up on any ongoing engagement or discussion

We do not use contact information for unsolicited marketing. When a visitor becomes a client, separate engagement-specific data-handling terms apply per the relevant service agreement.

4. Data Sharing and Disclosure

We do not sell, rent, or trade personal information. We may disclose information only in these limited circumstances:

  • Legal obligations: If required by applicable law, court order, or regulatory authority.
  • Protection of rights: To protect the security or integrity of our systems, or the rights and safety of our company or others.
  • Business transfers: In the event of a merger or acquisition, data may be transferred under the same privacy protections.

Contact form messages are transmitted to our secure mail server at mail.infosec.ink and stored in encrypted mailboxes accessible only to authorized personnel.

5. Cookies and Tracking

This website does not use cookies. We do not employ session cookies, persistent cookies, local storage tokens, or any equivalent tracking mechanisms. Visits to this website are not tracked across sessions or across other websites.

6. Data Retention

  • Contact form submissions: Retained for up to 12 months, or until the inquiry is resolved, whichever comes first.
  • Server access logs: Automatically purged after 30 days.
  • Client engagement data: Retained per individual service agreements, no longer than necessary for the engagement and applicable legal requirements.

7. Data Security

As a cybersecurity firm, we apply industry-leading practices to protect all data we handle:

  • All web traffic is encrypted via TLS 1.2/1.3 (HTTPS)
  • Email is delivered over encrypted SMTP with STARTTLS enforcement
  • Our mail server implements DKIM, SPF, and DMARC to prevent spoofing
  • Access to stored communications is restricted to authorized personnel only
  • Server infrastructure is regularly audited and patched

No method of transmission over the internet is 100% secure. However, we implement all reasonable technical and organizational measures to protect all data handled.

8. Individual Rights

Depending on the applicable jurisdiction, the following rights may apply:

  • Right to access: Request a copy of the personal data held about an individual.
  • Right to rectification: Request correction of inaccurate or incomplete data.
  • Right to erasure: Request deletion of personal data, subject to legal retention requirements.
  • Right to restrict processing: Request that we limit how data is used.
  • Right to data portability: Request personal data in a machine-readable format.
  • Right to object: Object to processing in certain circumstances.

To exercise any of these rights, contact us at contact@cyberneticresearch.ai. We will respond within 30 days.

9. Children's Privacy

Our services are intended for business clients and professional use only. We do not knowingly collect personal information from individuals under 18. If a minor is believed to have submitted information to us, contact us immediately and it will be deleted.

10. International Data Transfers

Cybernetic Research AI operates from 30 N Gould St Ste N, Sheridan, WY 82801, United States, and serves clients globally. Data submitted through our contact form is processed and stored on servers within our infrastructure. When services are accessed from outside the jurisdiction where our servers are located, data may be transferred internationally. By submitting information to us, a user consents to this transfer under the same privacy protections described in this policy.

11. Third-Party Links

Our website contains links to external websites including cybersecurity news sources and research publications. This Privacy Policy applies only to cyberneticresearch.ai. We are not responsible for the privacy practices of any third-party sites.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. Continued use of our website after any update constitutes acceptance of the revised policy.

13. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy: