Privacy Policy

Effective date: 23 September 2026

This policy explains how cypen.ai collects, uses, stores and protects the personal information you share with us when you visit our website, request pricing, sign an engagement, or otherwise get in touch.

1. Who we are

cypen.ai is an AI-accelerated offensive security service offered by Agentic Security Pty Ltd (ABN 42 701 054 506). The personal information controller for this website is Agentic Security Pty Ltd, with an Australian principal place of business. For privacy questions, email info@cypen.ai.

2. What we collect

We collect only the information needed to respond to you, provide pricing, or deliver services:

  • Contact details — name, work email address, company name, and any details you provide in a message or scoping form.
  • Quote and engagement data — engagement type, scope answers, pricing selections, signed quote records, and any purchase order or billing references you provide.
  • Technical data — IP address, browser type, device information, and pages visited. This is collected automatically through server logs and analytics.
  • Communications — emails, support requests, and any other correspondence.

3. How we use your information

We use your information to:

  • Respond to enquiries and provide pricing or scoping information.
  • Prepare, sign, and manage engagement quotes and statements of work.
  • Deliver penetration testing and security services.
  • Process billing and maintain business records.
  • Improve the website, security, and user experience.
  • Comply with legal and professional obligations.

4. Legal basis for processing

We process personal information on the basis of our legitimate business interests, the performance of a contract, compliance with legal obligations, or your consent, depending on the context. Where consent is required, you can withdraw it at any time by contacting us.

5. How we share information

We do not sell your personal information. We share it only with service providers who help us operate the business (for example, cloud hosting, database, analytics, payment, and electronic signature services), and only under confidentiality and security obligations.

We may disclose information if required by law, regulation, legal process, or to protect our rights, property, or safety.

6. Security

We apply appropriate technical and organisational security measures to protect the information we hold, including access controls, encryption in transit, and secure hosting environments. We also apply the same security discipline to our own infrastructure that we apply to client testing.

7. Data retention

We keep your information for as long as needed for the purposes described in this policy, or as required by law, professional standards, or contract. When no longer needed, we delete or anonymise it securely.

8. Cookies and tracking

Our website may use cookies and similar technologies to understand how visitors use the site, to keep sessions secure, and to support analytics. You can control cookies through your browser settings. Analytics data is collected in aggregated form and is not used to identify individuals.

9. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or export your personal information, or to object to certain processing. To exercise these rights, contact us at info@cypen.ai. We will respond within a reasonable timeframe and may need to verify your identity before acting.

10. Third-party links

This website may contain links to third-party sites. We are not responsible for the privacy practices or content of those sites. We encourage you to read their privacy policies before submitting information.

11. Changes to this policy

We may update this policy from time to time. The effective date at the top of this page will be revised accordingly. We encourage you to review the policy periodically.

12. Contact us

If you have questions about this privacy policy or how we handle your information, please contact us at info@cypen.ai.