Privacy Policy

Armadin, Inc. ("Armadin," "we," "our," or "us") is an AI-native cybersecurity company that provides continuous offensive security services to enterprise organizations.

We are committed to protecting the privacy of individuals whose personal information we process and to being transparent about how we collect, use, disclose and protect that information.

This Privacy Notice explains how we process personal information when you visit our website, interact with us, attend our events, communicate with us, or otherwise engage with us as a prospective or existing customer, partner, supplier or other business contact.

Our Services are designed for organizations rather than consumers. We do not offer products or services for personal, family or household use.

This Privacy Notice does not apply to personal information processed by Armadin on behalf of its customers except to the extent Armadin acts as an independent Controller as described in this Notice.

This Privacy Notice applies to personal information that Armadin processes as a Controller in connection with your interactions with Armadin, including when you visit our website, contact us, request information, register for events, engage with us as a customer, prospective customer, supplier, partner or other business contact, or apply for employment with Armadin.

When Armadin provides its cybersecurity Services to customers, it generally processes personal information on behalf of those customers in accordance with the applicable customer agreement and Data Processing Addendum available through Armadin's Trust Center. In those circumstances, the customer determines the purposes and means of the processing and Armadin acts as a Processor (or Service Provider under applicable U.S. privacy laws).

However, where permitted under law and the applicable customer agreement, Armadin may also process personal information as an independent Controller for certain activities necessary to operate, maintain, secure, support and improve its Services and business.

If you believe your personal information has been processed through one of our customers' use of the Services, you should contact that customer directly. Armadin will assist its customers where required by applicable law or its contractual commitments.

We may provide supplemental privacy notices for specific processing activities, including recruitment or employment, where required. Those notices supplement, rather than replace, this Privacy Notice.

The categories of personal information we collect depend on how you interact with us.

Information you provide directly

We may collect personal information that you provide directly to us, including your name, business contact details (such as your business email address, telephone number and employer), job title, account credentials, communications with us, including emails, chat interactions, and, where applicable, recordings of telephone calls, video conferences, webinars, demonstrations, or other communications conducted with Armadin when requesting a demonstration, downloading resources, registering for events or subscribing to communications, and any other information you choose to provide.

Information collected automatically

When you visit our website, we and our service providers may automatically collect certain technical information, including your IP address, browser type, device identifiers, operating system, approximate location derived from your IP address, pages viewed, the website that referred you to our website, the date and time of your visit, your interactions with our website, and information collected through cookies, pixels, chat technologies, session technologies, and similar technologies. Additional information regarding these technologies is available in our Cookie Notice

Where required by applicable law, we will obtain your consent before placing non-essential cookies or similar technologies on your device.

Information from third parties

We may receive personal information from third parties, including publicly available sources, professional networking platforms (such as LinkedIn), event organizers, marketing partners, and business partners who introduce prospective customers. We may combine this information with personal information that we collect directly from you where permitted by applicable law.

Information processed on behalf of customers

When Armadin provides its Services, we process personal information made available by or on behalf of our customers through their use of the Services. The categories of personal information processed depend on the customer's environment, the Services used and the customer's configuration and instructions.

We disclose Personal Information only where necessary to operate our business, provide our Services, comply with applicable law, or otherwise as described in this Privacy Notice.

We require service providers processing Personal Information on our behalf to do so under appropriate contractual obligations consistent with applicable law.

The personal information we collect and our purposes for processing depend on how you interact with us.

When providing the Services, Armadin generally processes personal information on behalf of its customers. However, Armadin also processes personal information as an independent Controller for certain activities necessary to operate, maintain, secure, support and improve its Services and business. Where such processing relates to personal information processed in connection with customer Services, it is carried out only where permitted by applicable law, the applicable customer agreement and appropriate contractual and technical safeguards.

The categories of personal information we collect may include your contact details, employment history, education, professional qualifications, interview notes, references and any additional information you choose to provide.We require service providers processing Personal Information on our behalf to do so under appropriate contractual obligations consistent with applicable law.

Unless otherwise required by law or with your consent, we retain applicant information only for as long as necessary to complete the recruitment process and comply with applicable legal obligations.

Armadin uses proprietary artificial intelligence and machine learning technologies to provide, maintain, secure and improve its cybersecurity Services.

Armadin does not use personal information processed on behalf of customers to train publicly available or third-party artificial intelligence models.

Armadin does not make decisions based solely on automated processing that produce legal or similarly significant effects on individuals.

The use of artificial intelligence is subject to appropriate technical, organizational and contractual safeguards designed to protect personal information and maintain the security and integrity of the Services.

Our website uses cookies and similar technologies to operate and secure the website, remember your preferences, understand how visitors interact with the website, improve its performance and functionality, and measure the effectiveness of our communications and marketing activities.

Where required by applicable law, we obtain your consent before placing non-essential cookies or similar technologies on your device.

For more information about the cookies we use and how to manage your preferences, please see our Cookie Notice.

Armadin is headquartered in the United States.

Personal information may be transferred to and processed in countries outside the country in which it was originally collected.

Subject to applicable law, we implement appropriate safeguards for international transfers, including the European Commission's Standard Contractual Clauses or other legally recognized transfer mechanisms.

Armadin's Services are intended for businesses and organizations and are not directed to children. We do not knowingly collect Personal Information directly from children or offer products or services intended for their use. If we become aware that we have inadvertently collected Personal Information directly from a child in violation of applicable law, we will take reasonable steps to delete that information unless we are required or permitted to retain it by law. If you believe that a child has provided Personal Information directly to Armadin, please contact us.

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected and processed, taking into account the nature of the information, the purposes of processing, our legal obligations and our legitimate business needs.

When personal information is no longer required for those purposes, we securely delete it, unless a longer retention period is required or permitted by applicable law.

Security

We maintain appropriate administrative, technical, and organizational measures designed to protect Personal Information against unauthorized access, use, disclosure, alteration, or destruction. Additional information is available under the Armadin’s Trust Center.

Although no security measures can guarantee absolute security, we regularly review and update our safeguards in light of evolving technologies, security threats, and legal requirements.

Depending on your location and applicable law, you may have the right to access, correct, delete, restrict or object to our processing of your personal information, withdraw your consent where processing is based on consent, receive a copy of your personal information in a portable format, or exercise other rights available under applicable privacy laws.

Where Armadin processes personal information on behalf of one of its customers, requests relating to that information should generally be directed to the relevant customer, who determines the purposes and means of the processing. Armadin will assist its customers in responding to such requests where required by applicable law or its contractual commitments.

Where Armadin processes personal information as an independent Controller, you may submit your request to us at [email protected]. We will respond to requests to exercise applicable privacy rights to the extent required by applicable law.

If you are a California resident, you may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), including the right to know what personal information we collect, use and disclose, request correction or deletion of your personal information, receive a copy of certain personal information, opt out of the sale or sharing of personal information where applicable, and not be discriminated against for exercising your privacy rights.

Armadin does not sell personal information, share personal information for cross-context behavioral advertising, or use or disclose sensitive personal information for purposes that require offering a right to limit under the CCPA/CPRA.

Where Armadin processes personal information on behalf of its enterprise customers, it acts as a Service Provider (or Contractor, where applicable) under the CCPA/CPRA.

Armadin reserves the right to update this Privacy Notice from time to time to reflect changes in our business, Services, legal obligations, privacy practices or as required by applicable law.

If you have questions about this Privacy Notice or wish to exercise your privacy rights, you may contact us at:

Armadin, Inc.
Email: [email protected]

If applicable law provides you with the right to lodge a complaint with a supervisory authority, you may also contact the competent authority in the jurisdiction where you reside or work.