Privacy Policy

At Giga Cypher Systems, your privacy is paramount. Your data belongs to you, and we are committed to safeguarding it. This policy outlines what information we collect, why we collect it, how we use it, and your rights regarding your personal information.

What We Collect and Why

We adhere to the principle of data minimization, collecting only what is necessary to provide our services effectively. Below is a detailed breakdown of the data we collect and its purpose:

Identity & Access

When you sign up for a Giga Cypher Systems product, we request basic identifying information, such as:

Name and email address: To personalize your account and send essential communications like updates or account-related notifications.
Business name (optional): To tailor your account to your organization, if applicable.
Profile picture (optional): You may choose to upload a profile picture for display within our products. We do not access or analyze these images.

We will never sell your personal information to third parties or use your name or business in marketing materials without your explicit consent.

Geolocation Data

To ensure account security, we log:

Full IP addresses for all account access and sign-ups. This helps us verify that no unauthorized access occurs.
Retention: We retain this login data for as long as your account remains active.

Website Interactions

When you interact with our applications, we collect certain data automatically to improve user experience and inform design decisions:

Browser and device information: Includes operating system, browser version, and device type for compatibility and analytics.
Website usage: Tracks pages visited, page load times, and referring websites for statistical purposes, such as monitoring conversion rates or testing new features.
Link clicks: Occasionally tracked to refine design and functionality.
Retention: Web analytics data tied to your IP address or user account are anonymized after 30 days.

Additional details about analytics are provided in the Cookies and Do Not Track section below.

Cookies and Do Not Track

We use persistent first-party cookies to:

Store user preferences for a seamless experience.
Support internal analytics to improve our applications.

Cookies are small text files stored by your browser to remember login details or site preferences. They may also collect data like browser type, operating system, pages visited, visit duration, and click-stream data. You can manage cookie settings directly in your browser. For more information, visit www.allaboutcookies.org.

Currently, our sites and applications do not respond to Do Not Track signals from browser plugins.

Voluntary Correspondence

When you contact us with questions or support requests, we retain:

Emails and correspondence: Including your email address, to maintain a record for future reference.
Surveys or interviews: We store any voluntarily provided information, such as survey responses. For recorded interviews, we will request your explicit consent beforehand.

Information We Do Not Collect

We do not collect sensitive personal information, including:

Characteristics of protected classifications (e.g., age, race, gender, religion, sexual orientation, gender identity, or disabilities), unless voluntarily provided (e.g., pronouns in an email signature).
Biometric data: We do not extract or analyze any information from profile pictures, which are for your use only.

How We Approach Mobile App Permissions

Our mobile apps are designed to request the minimum permissions necessary for a secure and functional experience:

Default access: Network access to connect to the internet.
Just-in-time permissions: We request access to features like contacts, camera, or calendar only when needed, allowing you to decide whether to grant permission.
Push notifications: On Android, no permission is required to send push notifications.
File access: For our Android 5 app, the OS may prompt for permission to read/write device files for uploading or downloading attachments.

We will always explicitly request permission for sensitive features, and you are never required to grant access, though some features may not function without it.

When We Access or Share Your Information

We access or share your information only in the following limited circumstances:

To Provide Support

Troubleshooting: If we need to access your account to resolve a support issue or bug, we will request your explicit consent first.

Legal Requirements

Giga Cypher Systems, Ltd is a Kenyan company with data infrastructure in the United States.
Kenyan law enforcement: We comply with valid warrants, criminal subpoenas, or court orders under Kenyan law. We reject all other requests and notify you of any such requests unless legally prohibited.
International requests: We refuse data requests from foreign authorities unless compelled by the U.S. government through a mutual legal assistance treaty or agreement.
Data preservation: We refuse preservation requests unless compelled by the Data Protection Act of Kenya or a valid Kenyan subpoena. Preserved data is destroyed after the preservation period unless a proper warrant, court order, or subpoena is received.
Informal requests: We do not assist with informal data requests from any person or entity.

Business Transitions

In the unlikely event of a merger or acquisition, we will notify you well in advance before transferring your information, ensuring it is subject to a comparable privacy policy.

Your Rights Regarding Your Information

We extend the same data rights to all customers, regardless of location:

Right to Know: Understand what personal information we collect, use, share, or sell (we do not sell your data).
Right of Access: Access your personal information and details about its use, storage, and processing.
Right to Correction: Request corrections to inaccurate personal information.
Right to Erasure (“Right to be Forgotten”): Request deletion of your personal information, subject to legal limitations. Note that deletion may prevent you from using our services.
Right to Complain: File a complaint with the appropriate supervisory authority regarding our data handling.
Right to Restrict Processing: Request limitations on how and why your data is used, including opting out of data sales (we do not sell data).
Right to Object: Object to certain uses of your personal information in specific situations.
Right to Portability: Receive your personal information and transmit it to another party.
Right to Avoid Automated Decision-Making: Prevent decisions with legal or significant effects from being made solely by automated processes, unless necessary for a contract, allowed by law, or based on your consent.

To exercise these rights, you can often update your account directly. For assistance or to request deletion or details about your data, contact us at gigacyphersystems@gmail.com. We verify identity using at least two pieces of collected information (e.g., your email address). Authorized agents must provide written consent with the account holder’s signature.

How We Secure Your Data

We prioritize the security of your information:

Encryption in transit: All data transmitted between our servers and your browser is encrypted using SSL/TLS.
Database encryption: Backups are encrypted, and personal data fields are encrypted with unique keys.
Disk encryption: Data keys are stored on encrypted disks, accessible only when needed to send data to you.

Data Deletion in Your Product Accounts

Active accounts: Data you delete within our applications is removed from our systems and logs immediately and is no longer accessible. Retrieving deleted data from backups is not feasible due to cost and complexity.
Cancelled accounts: Data is purged within 60 days of account cancellation, whether initiated by you or automatically.

Changes to This Policy

We may update this policy to comply with regulations or reflect new practices. Significant changes will be communicated via email to gigacyphersystems@gmail.com.

Questions or Concerns

If you have questions about this policy, your data, or your rights, please contact us at gigacyphersystems@gmail.com. We’re here to help!