Privacy & your rights

Account privacy statement · Updated 1 October 2026

You can create an account using a one-time email verification code. This statement applies when you choose to use the account feature.

Information we collect

When you register, we use your verified email address and name to provide and manage your account. Company and job title are optional. If Google or Apple sign-in is offered, it supplies basic identity information; we do not request access to your inbox, contacts, files, or calendar. Apple users may use their private relay email address.

We use necessary session cookies to keep you signed in and protect account actions. Email verification codes are generated by Supabase Auth and delivered through Resend from no-reply@auth.f5cyber.com. Resend processes the recipient address, message content, and delivery events to deliver these messages. We do not use account registration to subscribe you to marketing.

How your information is protected

The account service uses Supabase and PostgreSQL, an open-source database technology. The account database is hosted in Frankfurt, and the configured email-sending region is Ireland. Personal profile fields are encrypted with AES-256-GCM before being stored, with the application encryption key kept separately from the database. Access to profile data requires a verified session and server-side authorization. Email is masked on the account page until you choose to reveal it.

Encryption and masking are different: encryption protects stored data, while masking reduces what is displayed. Your email address must still be processed by the authentication service to verify sign-in. Its authentication records and infrastructure backups are governed by that provider’s security and retention controls. This is not an anonymous or end-to-end encrypted service.

Your right to be forgotten

You may request erasure of your personal data, including when it is no longer needed for its original purpose, subject to applicable law. In Your account, choose “Delete my account” after a recent sign-in. Deletion removes your F5 Cyber sign-in account and encrypted personal profile from active storage and ends access to that account.

Deletion does not remove your Google, Apple, Microsoft, or email-provider account, or records those providers independently control. Any residual copies in infrastructure backups expire under the service’s configured backup-retention policy. Limited records may need to be retained where required by law; if that affects an erasure request, we will explain the reason and applicable retention.

Dashboard choices made as a guest are stored separately using a browser identifier and are not linked to your account profile. Contact us if you also want help removing guest data or data associated with another browser.

Access, correction and questions

You can review and correct your name, company, and job title in your account. To request access, correction, erasure, or information about retention, contact rami@f5cyber.ai. We may ask for proportionate proof of identity to protect your information. Where GDPR applies, requests are generally answered within one month, subject to its permitted exceptions and extensions. You may also complain to your relevant data protection authority.

For background on erasure rights, see the European Commission’s guidance.