Privacy Policy

Cybexsoft Consultancy Services Pvt Ltd ("Cybexsoft", "we", "us") is a software development and IT consultancy registered in India. This policy applies to cybexsoft.com, the Cybexsoft client portal, the Cybexsoft admin console, and any product we license or distribute to you — including our WordPress plugins Cybex SMTP, Cybex Contact Form and Cybex Login Security, together with their Pro add-ons.

If you have questions about this policy or how your data is handled, write to admin@cybexsoft.com.

We collect information directly from you, automatically through your use of our services, and from the products you license.

• ·Account information — name and email address when you create a client portal account, and a securely hashed password. We never store your password in plain text.
• ·Enquiry and contact details — anything you submit through a contact form or email, including project briefs.
• ·License and domain data — for licensed products such as the Pro add-ons for Cybex SMTP, Cybex Contact Form and Cybex Login Security, the domain name(s) a licence key is activated against, and activation/deactivation timestamps.
• ·Session and authentication data — session tokens stored in httpOnly cookies, used only to keep you signed in and to distinguish portal accounts from admin accounts.
• ·Technical data — IP address, browser type and basic request logs, collected for security and troubleshooting.

• ·To create and maintain your client portal account, including email verification and account status checks required before first login.
• ·To provide the services you've engaged us for, and to respond to enquiries and support requests.
• ·To issue, verify and manage software licences, including checking a licence key against the domain it was activated on when an external application calls our verification endpoint.
• ·To keep our systems secure — detecting abuse, rate-limiting suspicious activity and investigating incidents.
• ·To send account-related emails, such as email verification links and password reset links. We do not send marketing email unless you separately opt in.

Our WordPress plugins are installed on your own server, and the data they handle — form submissions, email logs, login records — stays in your own database. We never receive it. There are only two things a plugin sends to us, and both are described in full in each plugin's readme under “External services”.

• ·Promotions feed — once a day, on WP-Cron, the plugin asks https://cybexsoft.com/api/offers whether we have published an offer. The request carries two values: the plugin slug and the installed version. It identifies your site in no other way: no site URL, no admin email, no licence key, no visitor data and nothing from your forms, logs or submissions. As with any request over the internet, your server's IP address is visible to us as the receiving server. This runs in wp-admin and on cron only, never on your public pages, and you can switch it off completely by defining CYBEX_ECF_DISABLE_OFFERS, CYBEX_LS_DISABLE_OFFERS or CYBEX_SMTP_DISABLE_OFFERS in wp-config.php.
• ·Licence verification — only if you have bought a Pro add-on and entered a licence key. Your key and your site's home URL are sent to https://cybexsoft.com/api/licenses when you activate or deactivate the key, and once a day afterwards to confirm it is still valid. Nothing is sent while no licence key is stored, which is the case for every free install.

Anything else a plugin contacts is a third-party service you configured yourself — your own mail provider, CAPTCHA provider or breach-check service. Those send data directly from your server to that provider under their own terms, not ours; each plugin's readme names every one of them.

We use a small number of first-party, httpOnly session cookies (portal_session for client portal accounts, admin_session for the admin console) to keep you signed in. These cookies are strictly functional — we do not use third-party advertising or tracking cookies on the client portal or admin console.

The public marketing site does not set any tracking cookies beyond what's required to remember basic UI preferences.

We do not sell your personal data. We share information only in the following circumstances:

• ·With infrastructure providers (hosting, email delivery) strictly to operate our services, under confidentiality obligations.
• ·When a licensed application calls our licence verification API, we return only what's necessary to confirm validity — plan, status and the domain(s) the licence is bound to — not your personal contact details.
• ·If required by law, court order, or to protect the rights, safety or property of Cybexsoft, our clients or the public.

We retain account and licence data for as long as your account or licence is active, and for a reasonable period afterwards to meet legal, accounting and dispute-resolution requirements. You can request deletion of your portal account at any time by writing to admin@cybexsoft.com; some records (such as invoices) may be retained longer where we're legally required to keep them.

Depending on where you're located, you may have rights to access, correct, export or delete your personal data, and to withdraw consent where processing is based on consent. Indian users have rights under the Digital Personal Data Protection Act, 2023. To exercise any of these rights, contact admin@cybexsoft.com — we'll respond within a reasonable time and may need to verify your identity first.

Passwords are hashed using scrypt and never stored or logged in plain text. Session tokens are stored in httpOnly cookies to reduce exposure to script-based attacks. Access to production systems and the admin console is restricted to named engineers. No method of transmission or storage is completely secure, but we take reasonable, industry-standard steps to protect your data.

Our services are intended for businesses and individuals capable of entering into a contract, and are not directed at children. We do not knowingly collect personal data from children under 18.

We may update this policy as our services change. Material changes will be reflected by updating the effective date at the top of this page. Continued use of our services after a change constitutes acceptance of the updated policy.

Cybexsoft Consultancy Services Pvt Ltd · admin@cybexsoft.com · Registered office: 2A/134 Vrindavan Yojna, Lucknow, Uttar Pradesh 226025, India.