Aryon Security Privacy Policy

Last Updated: June 7, 2026

In order to ensure transparency and give you more control over your personal information, this privacy policy ("Privacy Policy") governs how we, Aryon Security Ltd. ("Aryon", "we", "our" or "us") use, collect, disclose, protect and store personal information that we collect or receive from or about you ("you" or, where applicable, “Customer”) in connection with https://www.aryon.security/ (the "Website") and the services provided by Aryon (on our Website or directly, collectively the "Services").

In this Privacy Policy, "personal information / Personal Data" means information that identifies or may reasonably be linked with an individual. We may collect and process your personal information when you: (a) visit or use the Website; (b) use or access the Services; (c) communicate with us, including by submitting a request for a demo; and/or (d) apply for a job with us.

Please read this Privacy Policy carefully, so you can fully understand our practices in relation to personal information. Important note: Nothing in this Privacy Policy is intended to limit in any way your statutory rights, including your rights to a remedy or other means of enforcement. This Privacy Policy forms an integral part of our Terms of Use and/or any other legal instrument in effect with the Customer. If your organization has executed License Agreement and/or a Data Processing Agreement (“DPA”), or any other legal biding document with Aryon, those documents will prevail in the event of conflict with this Privacy Policy, with respect to their subject matter and scope.

This Privacy Policy can be updated from time to time and, therefore, we ask you to check back periodically for the latest version. If we implement material changes in the way we use your information, in a manner that is different from that stated at the time of collection, we will notify you by posting a notice on our Website or by other means and take any additional steps as required by applicable law. Unless otherwise required by applicable law, the provision of personal information to us is voluntary. However, where certain personal information is necessary for us to provide the Website, the Services, support, recruitment, or other requested services, failure to provide such personal information may prevent us from providing you with the relevant services, features, or responses.

1. WHAT PERSONAL INFORMATION WE COLLECT, WHY WE COLLECT IT, AND HOW IT IS USED

(i) We process the following personal information:

Information provided through the Services. We collect personal information that you voluntarily provide, such as your full name, email address, password, job title, and company name, as well as any other information that you decide to provide us. We also collect the contact and billing information of our customers.
Information provided through the Website. When you use the Website, we collect and process full name, email address, job title, and company name when you interact with the Website, for example, when you send us a request for a demo or contact us.
Information automatically collected. We automatically collect certain information through your use of Website or the Services, such as cookies, pixels, tags, SDKs, session replay tools and similar identifiers ("Cookies and Similar Technologies"), your Internet protocol (IP) address, and other device identifiers that are automatically assigned to your device, browser type and language, geo-location information, hardware type, operating system, internet service provider, and other information about actions taken through the use of the Services and Website. In addition, we may automatically collect and store the following information for statistical, security and operational purposes (log data): technical information regarding browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, uniform resource locators (URL) clickstream to, through and from our Website, page response times, download errors, length of visits to certain pages, page interaction information and methods used to browse away from the Website. Some cookies and similar technologies may be used to provide you with advertising for our Services based on your preferences and interests. For more information about how we use cookies, please refer to Section 2 below.
Information from Other Sources. Aryon also may obtain personal information about you from third party sources, including publicly or commercially available information, and through third-party data platforms, affiliates, business partners, and service providers. Such information may include business contact details, professional information, account-related information, and other information relevant to our business relationship, recruitment process, or the operation and security of the Services.
Customer Data processed on behalf of Customers. In connection with providing the Services, customers may submit, upload, transmit, store, or otherwise make available data, logs, records, configuration-related information, and other content for analysis, monitoring, evaluation, and enforcement, and may receive outputs, insights, alerts, and other results generated by the Services ("Customer Data"). Customer Data may include Personal Data. To the extent Aryon processes or stores such Customer Data on behalf of a Customer, Aryon acts as a processor acting under the Customer’s instructions, and the relevant Customer remains responsible for determining the lawful basis for processing and for its compliance obligations under applicable law. Customer Data shall be treated as confidential information between the parties. Customers are solely responsible for ensuring that their processing of any Personal Data through the Services complies with applicable privacy and data protection laws, including obtaining all required notices, consents, permissions, and other lawful bases, and for responding to data subject requests relating to Customer Data where required by law or contract.
Information you provide to us in person. For example, when you visit one of our exhibition booths or attend one of our events and provide us with your contact details.
Information we collect from online interactions. For example, if you attend a webinar, contact us via social media, or otherwise interact with our business, including as a representative of a current/prospective customer, supplier, or partner, we track and make a record of those interactions, which may contain your contact details such as full name, email address, messages, and any other information that you decide to provide us with.

(ii) We process information for the following purposes:

Under applicable data protection laws, we must have a legal basis to process Personal Data. Depending on the context, we process Personal Data based on one or more of the following legal bases: (i)performance of a contract or taking steps at your request prior to entering into a contract; (ii) our legitimate interests, such as operating, securing, maintaining, supporting, and improving the Services, preventing fraud, managing our business relationships, and marketing our services, subject to applicable law; (iii) your consent, for example where required for certain cookies and similar technologies; and/or (iv) compliance with legal obligations.

The Personal Data we collect or otherwise process may be used for the following purposes (as applicable):

To operate, maintain, secure, support, and improve our Services and Website.
To provide you with the Services. This includes creating an account, processing your requests, communicating with you, fulfilling service requests, sending you notifications, and improving the Services.
To allow you to make use of our Website. This includes processing demo requests, responding to inquiries, analyzing usage, and customizing your experience.
For Administrative Purposes. This includes customer support, internal quality control, business relationship management, and general administration, as well as onboarding, account administration, contract management, responding to requests, maintaining records of our interactions, and managing our relationships with customers, prospects, partners, and vendors.
To Market our Website and Services. This includes sending notifications about offers, tailoring content, conducting market research, and developing new products and services. We may also send service-related, operational, administrative, marketing, or promotional communications regarding our Website and Services. Where required by applicable law, we will send direct marketing communications only in accordance with applicable law, including based on consent, and you may opt out at any time.
For Security Purposes. This includes fraud prevention, error identification, compliance with applicable laws, and exercising legal claims. as well as enforcing our Terms of Use and agreements, protecting our rights, property, and safety and those of others, and operating security, fraud-prevention, and incident-detection processes.
De-identified and Aggregated Information Use. In certain cases, we anonymize or de-identify your personal information for internal and external purposes, including service improvement and research. We may also use aggregated or anonymized your personal information to operate, develop, improve, and support our products and services.
For Billing, Payments, and Financial Administration. This includes processing payments, invoices, and related transactions, maintaining billing, accounting, and financial records, detecting and preventing fraudulent or unauthorized payment activity, and complying with applicable legal, tax, and financial reporting obligations.
Cookies and Similar Technologies. We use Cookies and Similar Technologies to collect information through the Website and Services. These Technologies help us operate and secure the Website and Services, remember your preferences, understand how users interact with the Website and Services, improve functionality and performance, analyze traffic and usage trends, and, where permitted, support marketing, personalization and measurement activities. Technologies may collect information such as IP address, device identifiers, browser type, operating system, pages viewed, links clicked, dates and times of access, referring URLs, approximate location, and other usage or technical information.
‍
Some Cookies and Similar Technologies may be set by third-party providers that deliver services to us, such as analytics, advertising, website functionality, customer support, fraud prevention, or user experience providers, including, inter alia, Google Analytics, Apollo, RB2B, Lucky Orange, Snitcher and HubSpot. These third parties may collect information directly from your browser or device over time and across different websites or services, subject to their own privacy and cookie notices and the settings you make with them where available. We do not control the independent privacy practices of these third parties.

We may use different categories of Cookies and Similar Technologies, including: (i) strictly necessary technologies, which are required for the operation, security and core functionality of the Website and Services; (ii) functional technologies, which help remember your settings and enhance your experience; (iii) analytics technologies, which help us understand usage, improve performance and develop the Website and Services; and (iv) advertising, targeting or measurement technologies, which may be used to deliver, personalize and evaluate advertising or other communications, where applicable.

You can manage Cookies and Similar Technologies in several ways: (i) through our cookie banner and consent manager; (ii)through your browser settings, which may allow you to block, restrict or delete cookies; and (iii) in some cases, through device-level settings or controls provided by third-party services. Browser providers typically offer help pages explaining how to manage cookies, including Chrome, Safari, Firefox, Edge and other commonly used browsers. You can also find additional general information about cookies and how they work on publicly available educational resources such as www.allaboutcookies.org. Please note that, where required by applicable law, we will use non-essential cookies, including analytics and marketing cookies, only after obtaining any required consent from you.

Please note that disabling or removing Cookies and Similar Technologies may impact the availability, functionality and performance of certain parts of the Services, and some features may not work as intended. In addition, if you delete cookies from your browser after making choices through our cookie banner or settings tool, you may need to renew your preferences. Cookies and Similar Technologies used on the Website may change from time to time as we update the Website and the tools we use.

To the extent required by applicable law, you may withdraw your consent to non-essential cookies at any time through the cookie settings tool made available on the Website. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal. Please note, however, that strictly necessary technologies do not require consent where permitted by law because they are needed for the operation, security or provision of the Website and Services.

2. HOW WE PROTECT AND RETAIN YOUR PERSONAL INFORMATION

Security. We implement reasonable technical, organizational, and security measures to protect your information. However, no security measures can guarantee complete protection and you cannot expect, that the Services will be immune to information security risks.
Retention. We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law, or is necessary to establish, exercise, or defend legal claims. We may periodically review and delete, anonymize, or otherwise de-identify personal information that is no longer necessary for the purposes described in this Privacy Policy, unless we are required or permitted to retain it for a longer period. Retention periods are determined based on the nature of the information, the purposes for which it was collected and processed, applicable legal requirements, and our legitimate business needs.

3. HOW DO WE SHARE PERSONAL INFORMATION

Affiliates. We may share your Personal Data with our affiliated entities where necessary for internal administrative purposes and to provide, operate, and improve the Services.
Service Providers. We may disclose Personal Data to service providers that help us operate our business and provide the Services (for example, website and cloud hosting, security, analytics, customer support tools, recruitment tools, and billing/payment-related providers if and when relevant). As required by applicable laws, we contractually require our Service Providers to use Personal Data only as necessary to provide services to us, and to apply confidentiality, data protection and information security measures designed to protect the Personal Data to which they are granted access. Where appropriate and required by applicable law, we may also make available a list of certain sub-processors or service providers (“Sub-Processors List”) used in connection with the Services. We may update the Sub-Processors List from time to time (including by adding or replacing sub-processors) as our business and vendors change.
Corporate Transactions. We may disclose your Personal Data in connection with a proposed or actual corporate merger, acquisition, consolidation, sale of assets, bankruptcy, insolvency or other corporate change.
Law Enforcement Related Disclosure. We may share your Personal Data with government agencies or other relevant parties, such as a law office or independent auditor, under the following circumstances: (i) if we believe that such disclosure is appropriate to protect our rights, property or safety (including the enforcement of this Policy) or those of a third party; (ii) if required by law or court order; or (iii) as is necessary to comply with any legal and/or regulatory obligations, such as audit requirements.
Professional Advisers. We may share your Personal Data with our professional advisers including lawyers, bankers, auditors and insurers who provide consultancy, banking, legal, insurance and accounting services.
Compliance with applicable laws and regulations. We may also share Personal Data to comply with applicable laws and regulations or to respond to a lawful request for information we receive. We may also disclose such personal data if we believe disclosure is necessary to prevent physical, financial, or other harm, injury, or loss.
Law Enforcement. We may disclose your Personal Data to law enforcement agencies where we believe it is necessary to prevent or investigate illegal activity.
Other Disclosures with your Consent: We may disclose your personal data with your consent to other unaffiliated third parties who are not described elsewhere in this Privacy Policy.

Note that we also may share aggregated, anonymized, or de-identified information that does not reasonably identify you with third parties for research, analytics, or improving the Services.

Unless stated otherwise in this Privacy Policy, we do not sell your personal information for money, and we do not share, sell, auction off, or give away your personal information to third parties except as described in this Privacy Policy, with your consent, or as required or permitted by applicable law.

4. YOUR PRIVACY RIGHTS

You may have certain rights in connection with your Personal Data and the way we handle it, depending on where you reside and the applicable law. Some of these rights may be subject to certain exceptions or limitations. The following is a non-exhaustive list of certain privacy rights you may be able to exercise:

Right to access. You may contact the Company at any time as provided below and request access to the Personal Data we hold about you.
Right to correct. You may request that we correct the Personal Data we hold about you by providing us with the necessary information about you, if you find that such data is not accurate, complete or updated.
Right to delete or restrict “Right to be forgotten”. Under applicable law, you may request to delete or restrict access to your Personal Data. We may postpone or deny your request where permitted by applicable law (for example, where the Personal Data is necessary to provide the Services, comply with legal obligations, for security/fraud prevention, or to establish, exercise or defend legal claims), in which case we will let you know if we are unable to do so and why.
Cookie choices. Your browser or device can allow you to opt-out of data collection through Cookies or Similar Technologies and, where available, you may use our cookie banner or other consent tool to manage preferences. Please note that your experience using our Services might be degraded or certain functionalities may not work if you block or disable cookies. For more information about how we use cookies on our Website, please refer to "Cookies and Similar Technologies" in this Policy.
Marketing communications. If you wish to opt-out of our use of your contact information for our direct marketing purposes, you can click the "Unsubscribe" button located within the most recent marketing email you received from us or contact us as provided below.

Additional information for EU/UK residents.

If you are located in the European Economic Area, the United Kingdom or Switzerland, you may have additional rights under applicable law, including the right to object to certain processing (including processing based on our legitimate interests), the right to withdraw consent where processing is based on consent, and the right to data portability and the right to lodge a complaint with a competent supervisory authority.

Additional information for California residents(CCPA/CPRA).

If you are a California resident, you may have certain rights under the CCPA/CPRA, subject to applicable exceptions and limitations, including the right to: (i) request to know the categories and specific pieces of Personal Information (as such term is defined under California law) we collected about you, the categories of sources from which it was collected, the business or commercial purposes for collecting, using, disclosing, selling or sharing it, and the categories of third parties to whom we disclose it; (ii) request deletion of Personal Information; (iii) request correction of inaccurate Personal Information; (iv) opt-out of the “sale” or “sharing” of Personal Information; (v) limit the use and disclosure of sensitive personal information, to the extent applicable under the CCPA/CPRA; and (vi) not receive discriminatory treatment for exercising any of your privacy rights under the CCPA/CPRA. We do not sell Personal Information for money, and we do not use or disclose sensitive personal information for purposes that would trigger a right to limit under the CCPA/CPRA, except to the extent applicable law requires otherwise. To submit a request, contact us as described below.

If Aryon processes your personal data as part of Customer Data, as described above, on behalf of your organization (as Processor), please direct your request to your organization (Controller).

To exercise your rights, contact us at privacy@aryon.security. We may need to verify your identity before fulfilling your request.

5. INTERNATIONAL TRANSFERS OF PERSONAL INFORMATION

We store personal information on secure servers and may transfer data globally. In some cases, the laws in those countries may provide a different level of data protection than the laws of your own country. We may transfer data across borders and outside EEA or UK borders, as part of our regular business operations, for example between affiliated entities and to our service providers located in different countries, including in United States (based on the EU-U.S. Data Privacy Framework) and Israel (based on the European Commission's adequacy decision).Where required under applicable law, we implement appropriate safeguards for such transfers, including reliance on adequacy decisions, standard contractual clauses, and other equivalent transfer mechanisms, as well as additional measures where appropriate.

6. USE BY CHILDREN

We do not knowingly collect information from children under the age of 18. If we discover such data, we will delete it immediately. If you believe we have collected information from a minor, contact us at privacy@aryon.security.

7. USE OF ARTIFICIAL INTELLIGENCE

We may use automated tools and AI-assisted capabilities as part of the Services, including for policy enforcement, evaluation of infrastructure configuration changes, detection of misconfigurations, generation of alerts, and support of security-related workflows. The use of AI may involve the processing of Personal Data. We take reasonable technical and organizational measures designed to ensure such processing is lawful, fair, and limited to what is necessary for the purposes described in this Privacy Policy.

We do not use automated decision-making, including profiling, to make decisions that produce legal effects concerning you or similarly significantly affect you, without appropriate human involvement, unless such processing is permitted by applicable law and appropriate safeguards are in place. To the extent required by applicable law, where any processing constitutes automated decision-making relating to a data subject, we will provide the information required by law regarding the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

We may also use chatbots or other automated support tools (including tools provided by third parties) to help respond to inquiries, provide customer support, and route requests. When you interact with these tools, we may collect the content you submit (including messages and any information you choose to provide), along with related technical and usage information (such as timestamps and device/browser details). We use this information to provide support, improve our Services, maintain security, and comply with legal obligations. Please do not submit sensitive Personal Data through a chatbot unless we specifically request it.

If you have any questions about our use of AI, you are welcome to contact us using the contact details below.

8. INTERACTION WITH THIRD-PARTY PRODUCTS

Our Website and Services may include links to third-party services and may also involve the use of third-party providers and sub-processors in connection with the provision of the Services. Where such providers process personal information on our behalf, we remain responsible for their engagement as required under applicable law and contract, and we take steps designed to require that they protect personal information and use it only for authorized purposes. However, we do not control the independent privacy practices, policies, or actions of third-party services or providers except to the extent they act on our documented instructions in their capacity as our service providers or sub-processors. We encourage you to review the privacy policies of any independent third-party services you interact with.

9. DIRECT MARKETING

If we send direct marketing communications in the future, we will do so in a controlled manner and in accordance with applicable law, including based on consent, an existing business relationship, or another lawful basis where permitted, and each marketing communication will include an option to opt-out or unsubscribe.

10. CONTACT US

If you have any questions, concerns, or complaints regarding our compliance with this notice, or if you wish to exercise your rights, contact us at privacy@aryon.security.