Privacy Policy

Last Updated: January 2026

This Privacy Policy describes how MACAW Security, Inc. ("MACAW Security," "we," "us," or "our") collects, uses, and protects information when you use our services.

1. Information We Collect

Information You Provide

  • Account Information: Email address, name, organization name, password
  • Billing Information: Payment details (processed by our payment provider)
  • Configurations: Policies, agent settings, and integrations you create

Information Collected Automatically

  • Service Logs: API requests, errors, and performance data
  • Usage Metadata: Feature usage patterns, session duration (no content data)
  • Device Information: Browser type, IP address, operating system

Information from Identity Providers

If you sign in via SSO (Google, GitHub, etc.), we receive your name, email, and profile information as authorized by you.

2. Information We Do NOT Collect or Store

  • Your Prompts: Content passing through the system is not stored or analyzed
  • Agent Inputs/Outputs: Your data flows through but is not retained
  • Your Audit Logs for Our Use: Audit and event logs belong to you; we do not use them for product development

3. How We Use Information

To Provide Services

  • Create and manage your account
  • Process transactions
  • Provide customer support
  • Enforce policies and security

To Improve Services

  • Analyze usage metadata (not content) to improve features
  • Debug issues and monitor performance
  • Develop new capabilities

To Communicate

  • Send service-related notices
  • Respond to your inquiries
  • Send product updates (with your consent)

4. Your Data Ownership

You Own Your Data

Your configurations, audit logs, and event data belong to you. We process them only to provide the Services.

Export and Deletion

  • Export: You can download your audit logs and data at any time through the Console
  • Deletion: You can request deletion of your data by emailing support@macawsecurity.com. We will complete deletion within 30 days.

5. How We Share Information

We do not sell your personal information. We share information only as follows:

Service Providers

We use third-party vendors for:

  • Cloud infrastructure (AWS)
  • Payment processing (Stripe)
  • Email delivery

These providers are bound by confidentiality obligations.

Legal Requirements

We may disclose information if required by law, regulation, or legal process.

Business Transfers

In a merger, acquisition, or sale, your information may be transferred with notice to you.

6. Data Retention

Data TypeRetention
Account informationDuration of account + 30 days
Billing records7 years (legal requirement)
Audit logsAs you configure; deletable on request
Usage metadata2 years (anonymized)

7. Security

We implement reasonable security measures including:

  • Encryption in transit (TLS) and at rest
  • Per-tenant cryptographic keys
  • Access controls and authentication
  • Secure infrastructure on AWS

See our Security Practices document for details.

8. Your Rights

Access and Portability

You can access and export your data through the Console or by contacting us.

Correction

You can update your account information in the Console.

Deletion

You can request deletion of your personal information by emailing support@macawsecurity.com.

Opt-Out

You can opt out of marketing communications by clicking "unsubscribe" in emails or contacting us.

9. California Privacy Rights (CCPA)

If you are a California resident:

  • Right to Know: You may request what personal information we collect
  • Right to Delete: You may request deletion of your personal information
  • Right to Opt-Out: We do not sell personal information
  • Non-Discrimination: We will not discriminate against you for exercising your rights

10. International Users

If you are outside the United States, your information is transferred to and processed in the United States. By using the Services, you consent to this transfer.

11. Children

The Services are not intended for users under 18. We do not knowingly collect information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or the Console. Changes take effect 30 days after notice. Continued use after changes constitutes acceptance.

13. Contact

For privacy inquiries:

MACAW Security, Inc.
Email: support@macawsecurity.com

Copyright 2026 MACAW Security, Inc. All rights reserved.