We take your privacy seriously. What follows outlines the types of personal information we may collect when you access this site, how that personal information may be used and shared, as well as other data practices. This privacy policy applies to the personal information of users of our site and any other personal information we may receive about individuals, whether offline or online.
By using or accessing our site or cybersecurity solutions, you agree to the data practices described in this privacy policy and you are consenting to our processing of your personal information as outlined in this privacy policy now and as amended by us.
When you click away from our site and are directed to another site, those sites may collect personal information from you. This privacy policy does not apply to the collection of information from other websites.
Changes to This Policy
We may change this privacy policy from time to time. If we make any material changes to our privacy policy, we will either notify you by means of a notice on our site or via email. Where required by law, we will request your approval. We recommend that you review our privacy policy frequently for updates. Your continued use of our site after any change in this privacy policy will be treated as your acceptance.
1. Company Details
AccuSights is a US-based cybersecurity company offering innovative technology solutions across the globe. The company was founded by CEO Sam Khan and Co-founder Myra Khan, specialising in cybersecurity awareness, cybersecurity risk management and AI in cybersecurity for enterprises and small businesses.
AccuSights is a registered company and operates in Chicago, US. For any queries related to the privacy policy, you can reach out to us at [email protected].
2. Data Collection
User Data: Personal data relating to users of the Platform (Customers account administrators and end users of the Platform) and any other individual who uses or accesses the Platform (collectively, "Users") for cybersecurity services. This includes your name, phone, email address, IP address, location and analytics data.
Prospect Data: Personal data relating to any individual who visits our website and takes services via various sales and marketing channels, such as digital ads and content, emails, integrations or communications under AccuSights control ("Sites" and collectively with the Platform "Services"). This also includes participants at events, webinars and other business and marketing activities that AccuSights organises or participates in (collectively, Prospects).
Business Contact Data: Personal data relating to our customers internal focal persons who directly engage with AccuSights concerning their organization's account (e.g. billing contacts and authorized signatories), individuals who act as or work for a Service Provider or supplier and those who are employed by existing business or technology partners ("Partners"), to the extent their personal data has been disclosed to AccuSights in its capacity as a data controller (collectively, "Business Contacts").
Email Protection Data: Personal data relating to Customers Users, personnel, service providers and any other third party whose personal data is contained in any email (including attachments) processed by AccuSights via the Email Protection Services.
We may collect and receive a variety of information from you or about you or your devices from various sources, as described. If you do not provide your Personal Data when requested, you may not be able to use our cybersecurity consulting services if that information is necessary to provide you with our Services or if we are legally required to collect it.
Information that you provide to AccuSights: This includes Personal Data about you that you provide to us. The nature of the cybersecurity services you are requesting or using will determine the kind of Personal Data we might ask for, though such information may include (by way of a non-exhaustive list):
Basic Personal Data (such as first name, family name, position in the company [title]; company name, company email address, business phone number, business address; city; postcode; country any information that you choose to share through our Services which may be considered Personal Data.
Information that we collect or generate about you: Through our cybersecurity services, we provide traffic and security reports that include information on the internet usage of the organisation's computer users (which websites were visited by each user, any documents downloaded, security incidents and prevention measures taken by the gateway).
This includes:
• Files with your contact history to be used for inquiry purposes so that we may ensure that you are satisfied with our cybersecurity solutions.
• Activity data relating to the use of protected documents, such as altering a document's permissions and information regarding the individual who performed the activity;
• Information about you provided from third-party sources
• Through our cloud Email & Office service, the files and email correspondence (including the content therein) found in your accounts connected to such service.
• Through our mobile application, data about the installed and downloaded applications on your device is used for security analysis, detection, and prevention of malicious acts.
We collect data through a combination of analytics, marketing and communication tools that help us improve user experience, measure engagement and respond to inquiries effectively. These include:
• Google Analytics – Used to understand how visitors interact with our website, including pages visited, time spent on site, and geographic trends. Data collected through Google Analytics is anonymised where possible and used solely for performance and improvement purposes.
• Meta (Facebook) Pixel – Used to measure the effectiveness of our advertising campaigns on Meta platforms (Facebook, Instagram) and to deliver relevant ads to users who have previously interacted with our website.
• Contact and Inquiry Forms – When you voluntarily submit information through forms on our website (such as a "Contact Us" or "Request a Demo" form), we collect the personal details you provide (e.g., name, email, company, phone number) in order to respond to your request or provide the requested services.
• Cookies and Similar Technologies – Our website uses cookies, web beacons and similar tracking technologies to enable essential functionality, analyse website performance and personalise user experience. You can manage or disable cookies through your browser settings.
We do not sell your personal data to third parties. All information is handled in accordance with applicable privacy laws.
3. Purpose of Data Use
AccuSights, a cybersecurity company, collects and uses Information for legitimate business purposes in order:
• That a visitor may download product information, order products and take advantage of certain other features of the AccuSights website
• To provide information or interactive services through this website, to the visitors e-mail address or, where the visitor wishes it to be sent by post, to the visitor's postal address
• To seek the visitors feedback or to contact the visitor in relation to the services offered on the AccuSights website
• To process orders or applications submitted by the visitor
• To administer or otherwise carry out AccuSights obligations in relation to any agreement that the visitor may have with AccuSights
• To anticipate and resolve problems with any goods or services supplied to the visitor
• To create products or services that may meet the visitors needs
• To process and respond to requests, improve AccuSights operations, and communicate with visitor/s about AccuSights products, services and businesses
• To allow the visitor to subscribe to AccuSights news alerts related to cybersecurity trends
Being a reputed cybersecurity company, AccuSights collects user data for legitimate business purposes to ensure the security, performance and continuous improvement of our services. Specifically, we use the data we collect for the following reasons:
• Marketing and Communication – To share relevant updates, cybersecurity insights, and information about our products and services that may be of interest to you. This includes email campaigns, advertising optimisation, and remarketing activities (where legally permitted).
• Analytics and Performance Monitoring – To understand how visitors interact with our website, identify usage trends, and improve navigation, functionality, and content relevance.
• Customer Support and Relationship Management – To respond to inquiries, provide requested information, and maintain accurate records of communications with customers and prospects.
• Service and Product Improvement – To evaluate and enhance our cybersecurity solutions, user interfaces, and overall customer experience based on feedback and analytics.
• Security and Compliance – To detect, prevent, and address technical issues or security incidents, and to comply with applicable laws, regulations, and contractual obligations.
We collect only the minimum amount of data necessary to fulfill these purposes, and we handle all information responsibly, transparently, and in accordance with our Privacy Policy and applicable data protection laws.
4. Data Sharing
We do not sell or trade user data to third parties. However, in order to operate efficiently, provide advanced cybersecurity solutions, deliver our services, and improve user experience, we may share limited information with trusted third-party providers under strict confidentiality and data protection agreements.
These third parties may include:
• Hosting and Infrastructure Providers – We use secure third-party hosting services and cloud infrastructure (Amazon Web Services, Microsoft Azure or equivalent) to store and manage our website and application data.
• Analytics and Performance Platforms – We partner with analytics providers such as Google Analytics to better understand user interactions and website performance. All data shared is anonymised where possible and used strictly for internal analysis.
• Advertising and Marketing Networks – Platforms like Meta (Facebook) Ads or LinkedIn Ads may receive limited data (e.g., cookies or pixel events) to measure and optimise campaign performance and deliver relevant ads.
• Professional Service Providers – This may include customer relationship management (CRM) systems, email delivery services or technical consultants who assist us in operating, maintaining, or improving our services.
All partners are carefully selected and are contractually bound to process user data only in accordance with our instructions, and solely for the purposes outlined above. We also require them to maintain appropriate security and confidentiality standards.
If required by law or in response to a valid legal request, we may disclose information to law enforcement or regulatory authorities but only to the extent legally necessary.
5. Data Storage & Retention
We retain personal data only for the duration required to fulfil the purposes outlined above:
• Account, billing, and support data: Retained for 3 years
• User behaviour and simulation data: Deleted upon request or contract termination
• AI-generated simulations: Retained in de-identified form for product improvement
• Email remediation metadata: Deleted upon request or contract termination
• Voice samples: Deleted upon request or contract termination
• Company policies: Deleted upon request or contract termination
All personal data collected through our website and related services is securely stored and processed by AccuSights at the Azure server, located at East US 2 (Zone 2).
We maintain strict technical and organisational measures to protect this data from unauthorised access, disclosure, alteration, or destruction. These measures include encryption, network firewalls, access controls, and regular security audits consistent with industry best practices.
If you access our services from outside the United States, please note that your information may be transferred to and stored on servers located in the U.S. By using our website or submitting your information, you consent to this transfer, storage, and processing in accordance with this Privacy Policy.
AccuSights ensures that all data handling practices comply with applicable U.S. federal and state privacy laws, and where relevant, international data protection standards such as the EU General Data Protection Regulation (GDPR).
6. Security
We use reasonable efforts to apply procedures and practices that are reasonably designed to protect from accidental or unlawful destruction, loss, alteration, unauthorised disclosure of or access to personal information transmitted, stored or otherwise processed by us. Please contact us if you believe that your personal information has been subject to a data breach on our systems.
We maintain a robust, independently audited information security management program, aligned with best cybersecurity practices which includes:
• End-to-end encryption
• SSL security certification
• Firewall on our website
• Limited access to information
• Zero-trust access control models
• Role-based permissions and multifactor authentication
• Regular penetration testing and vulnerability management
• 24/7 monitoring and incident response
We do not collect information from minors, and we ask that you not access our site if you are a minor. Please contact us if you believe that we have collected information about your child.
We do not collect sensitive information, and we ask that you not send us such information. Sensitive information is defined by applicable law and can include the following: social security number, drivers license number, credit card number, racial and ethnic origin, political opinions, religious beliefs, criminal background, trade union membership, genetic data, biometric data and health data.
8. Third-Party Services
To deliver a secure, reliable and optimised digital experience, AccuSights integrates a limited number of trusted third-party tools and platforms into its website and operations. These tools help us analyze performance, manage client relationships and conduct ethical, permission-based marketing.
Our current integrations include:
• Google Tools – We use Google Analytics and related tools for website traffic analysis, performance monitoring and search optimization. These services may use cookies or similar technologies to collect non-personally identifiable information about site usage.
• Meta Platforms – We use the Meta (Facebook and Instagram) Pixel to measure ad performance and deliver relevant content to users who have shown interest in our services.
• LinkedIn – The LinkedIn Insight Tag helps us understand how visitors interact with our LinkedIn content and track the effectiveness of our professional outreach and campaigns.
• CRM Systems – We use a Customer Relationship Management (CRM) platform to securely manage customer interactions, sales inquiries, and service delivery. Access to this data is restricted to authorised AccuSights personnel only.
• Email and Communication Services – We may use third-party email delivery or automation tools (such as HubSpot, Mailchimp, or equivalent) for secure communication, newsletters, and service updates.
Each integrated platform complies with its own privacy policies and data-protection standards. Please note that this privacy policy does not address, and we are not responsible for, the privacy, information, or other practices of any third parties. For example, our site may link to other sites operated by third parties (Google, Meta, LinkedIn, CRM systems) or a third party may have a widget on our site that directs to their site. The inclusion of a link or a widget on our site does not imply endorsement of the linked site by us. We may also utilize framing techniques that may make it appear that you are still on the site when you are actually on a third-party website. This framed content is marked "ad" or "advertisement" or "sponsored" or similar designation.
Advertising partners and other third parties may use cookies, scripts and/or web beacons to track visitors to our site in order to display advertisements and other useful information when they visit other sites. Such tracking is done directly by the third parties through their own servers and is subject to their own privacy policies.
We are not responsible for these third parties data practices and cybersecurity solutions. We recommend that you visit such third parties' privacy policies.
9. AI Systems and Deepfake Technology
As a cybersecurity service provider our platform utilises artificial intelligence for:
• Generating security awareness content from customer policies
• Generating phishing templates based on user requests and context provided by admins
• Producing synthetic voice-based simulations for vishing training
• Classification and categorisation of reported emails
All such systems are governed by internal ethical use policies. No biometric profiling or actual voice cloning is performed without explicit contractual agreement and consent. AI interactions are confined within customer environments and not used to train general-purpose models.