Privacy Policy

Effective Date: June 10, 2025

1. Introduction

Pallas Security, Inc. ("Pallas Security," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website and AI infrastructure security services.

2. Information We Collect

Personal Information

We collect the following types of personal information:

• Contact Information: Name and email address
• Technical Information: IP address for security and service delivery purposes
• Account Information: Information provided during account registration

Automatically Collected Information

We automatically collect certain information through cookies and similar technologies:

• Website usage data and analytics
• Browser and device information
• IP address and general location information

3. How We Collect Information

• Account Registration: When you create an account for our services
• Cookies: First-party cookies to enhance your experience and website functionality

4. How We Use Your Information

• Service Delivery: Providing and maintaining our AI infrastructure security services
• Account Management: Managing your account and providing customer support
• Website Analytics: Improving our website functionality and user experience
• Legal Compliance: Meeting legal and regulatory requirements

We do not use your information for marketing purposes or share it with third parties for their marketing use.

5. Information Sharing and Disclosure

We do not sell, rent, or share your personal information with third parties, except in the following limited circumstances:

• Legal Requirements: When required by law, court order, or government request
• Business Protection: To protect our rights, property, or safety, or that of our users or others

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information:

• Data is stored in encrypted databases
• Information is encrypted both in transit and at rest
• Access controls and authentication measures are in place
• Regular security assessments and updates

7. Data Retention

We retain personal information for 90 days by default from the date of collection or last account activity. However, retention periods may be extended based on:

• Customer Requirements: When customers request longer retention for their business needs
• Legal Requirements: When longer retention is required by law
• Legitimate Business Purposes: When necessary for security, compliance, or service delivery

8. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

General Rights

• Access: Request access to your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your information in a portable format

California Residents (CCPA)

If you are a California resident, you have additional rights:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale (though we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

EU Residents (GDPR)

If you are an EU resident, you have additional rights under GDPR:

• Right to object to processing
• Right to restrict processing
• Right to withdraw consent
• Right to lodge a complaint with supervisory authorities

9. Cookies and Tracking Technologies

We use first-party cookies to:

• Remember your preferences and settings
• Enhance website functionality and user experience
• Maintain session information for logged-in users

You can control cookies through your browser settings. However, disabling cookies may affect website functionality.

10. International Data Transfers

We do not transfer personal information outside the United States. All data processing occurs within the United States.

11. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we learn that we have collected information from a child under 16, we will delete it promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes by:

• Posting the updated policy on our website
• Updating the "Effective Date" at the top of this policy
• Sending email notification for significant changes (if you have provided an email address)

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

For privacy-related inquiries, please allow up to 30 days for a response.

*This Privacy Policy was last updated on June 10, 2025