Privacy Policy
Last Updated: January 2026
This Privacy Policy describes how MACAW Security, Inc. ("MACAW Security," "we," "us," or "our") collects, uses, and protects information when you use our services.
1. Information We Collect
Information You Provide
- Account Information: Email address, name, organization name, password
- Billing Information: Payment details (processed by our payment provider)
- Configurations: Policies, agent settings, and integrations you create
Information Collected Automatically
- Service Logs: API requests, errors, and performance data
- Usage Metadata: Feature usage patterns, session duration (no content data)
- Device Information: Browser type, IP address, operating system
Information from Identity Providers
If you sign in via SSO (Google, GitHub, etc.), we receive your name, email, and profile information as authorized by you.
2. Information We Do NOT Collect or Store
- Your Prompts: Content passing through the system is not stored or analyzed
- Agent Inputs/Outputs: Your data flows through but is not retained
- Your Audit Logs for Our Use: Audit and event logs belong to you; we do not use them for product development
3. How We Use Information
To Provide Services
- Create and manage your account
- Process transactions
- Provide customer support
- Enforce policies and security
To Improve Services
- Analyze usage metadata (not content) to improve features
- Debug issues and monitor performance
- Develop new capabilities
To Communicate
- Send service-related notices
- Respond to your inquiries
- Send product updates (with your consent)
4. Your Data Ownership
You Own Your Data
Your configurations, audit logs, and event data belong to you. We process them only to provide the Services.
Export and Deletion
- Export: You can download your audit logs and data at any time through the Console
- Deletion: You can request deletion of your data by emailing support@macawsecurity.com. We will complete deletion within 30 days.
5. How We Share Information
We do not sell your personal information. We share information only as follows:
Service Providers
We use third-party vendors for:
- Cloud infrastructure (AWS)
- Payment processing (Stripe)
- Email delivery
These providers are bound by confidentiality obligations.
Legal Requirements
We may disclose information if required by law, regulation, or legal process.
Business Transfers
In a merger, acquisition, or sale, your information may be transferred with notice to you.
6. Data Retention
| Data Type | Retention |
|---|---|
| Account information | Duration of account + 30 days |
| Billing records | 7 years (legal requirement) |
| Audit logs | As you configure; deletable on request |
| Usage metadata | 2 years (anonymized) |
7. Security
We implement reasonable security measures including:
- Encryption in transit (TLS) and at rest
- Per-tenant cryptographic keys
- Access controls and authentication
- Secure infrastructure on AWS
See our Security Practices document for details.
8. Your Rights
Access and Portability
You can access and export your data through the Console or by contacting us.
Correction
You can update your account information in the Console.
Deletion
You can request deletion of your personal information by emailing support@macawsecurity.com.
Opt-Out
You can opt out of marketing communications by clicking "unsubscribe" in emails or contacting us.
9. California Privacy Rights (CCPA)
If you are a California resident:
- Right to Know: You may request what personal information we collect
- Right to Delete: You may request deletion of your personal information
- Right to Opt-Out: We do not sell personal information
- Non-Discrimination: We will not discriminate against you for exercising your rights
10. International Users
If you are outside the United States, your information is transferred to and processed in the United States. By using the Services, you consent to this transfer.
11. Children
The Services are not intended for users under 18. We do not knowingly collect information from children.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or the Console. Changes take effect 30 days after notice. Continued use after changes constitutes acceptance.
13. Contact
For privacy inquiries:
MACAW Security, Inc.
Email: support@macawsecurity.com
Copyright 2026 MACAW Security, Inc. All rights reserved.