Privacy Policy

1. Scope

This Privacy Policy describes how Cleon Labs ("we", "us", "our") collects, uses, and safeguards information in connection with our services, including the upload analyzer and integrated email security features.

2. Information We Process

• Account and Authentication Data. Basic account details and authentication tokens necessary to operate the Service.
• Upload Analyzer Data. Files you submit for analysis are processed temporarily in-memory and not stored or retained after analysis completes. To provide threat analysis, we share limited portions of uploaded content with third-party services including Google Gemini for AI-powered content analysis and VirusTotal for malware detection and URL reputation checking.
• Connected Provider Data. If you connect an email provider, we process email data as necessary to provide threat detection. We minimize retention and primarily store metadata, analysis outputs, connection status, and tokens needed to maintain the integration.
• Technical and Usage Data. IP address, device, and diagnostic data used to secure the Service (e.g., rate limiting of uploads, service reliability, abuse prevention).

3. How We Use Information

• Provide, operate, and improve the Service and its security features.
• Perform email threat analysis and deliver detection results.
• Secure the Service, including enforcing rate limits and preventing abuse.
• Communicate with you about updates, security notices, and support.
• Comply with legal obligations and enforce our Terms.

4. Data Retention

Upload Analyzer: Files and their contents are processed only as needed to produce analysis results and are not stored or retained after processing.

Connected Providers: We retain only what is necessary to maintain integrations and provide security outcomes (e.g., analysis summaries, incident records, limited metadata, and tokens). We strive to avoid storing message bodies unless strictly necessary for security operations.

5. Information Sharing

We do not sell personal information. We may share information with service providers that support our operations (e.g., infrastructure, authentication) under confidentiality obligations, or as required by law, to protect rights and safety, or in connection with corporate transactions.

For the upload analyzer functionality, we share limited portions of uploaded content with specialized third-party services for AI-powered content analysis and for malware detection and URL reputation checking. These services receive only the minimum data necessary to perform their security analysis functions, and we do not share full email content or personal information beyond what is required for threat detection purposes.

6. Security

We implement technical and organizational measures designed to protect information, including encryption in transit, access controls, and least-privilege design. No system is 100% secure; you are responsible for maintaining the security of your account and for avoiding uploads of sensitive data to the analyzer.

7. International Data Transfers

Information may be processed and stored in jurisdictions other than your own. Where required, we implement appropriate safeguards for cross-border transfers.

8. Your Choices

• Do not upload files containing personal, confidential, or sensitive information.
• Manage connected provider integrations and revoke access at any time.
• Contact us to exercise rights available under applicable law (e.g., access or deletion where applicable).

9. Children's Privacy

The Service is not directed to children under 16, and we do not knowingly collect information from children under 16.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice as appropriate. Your continued use of the Service indicates acceptance of the updated policy.

11. Contact Us

Questions about this Privacy Policy? Contact us using the information provided on our website.