Privacy Policy

Last updated: May 14, 2026

1. Who We Are

Leverage Cyber ("we," "us," "our") operates the leveragecyber.com website and the SurfaceIQ external attack surface management platform. This policy describes how we collect, use, and protect information when you visit our website or use our services.

2. Information We Collect

Website visitors:

Contact form submissions — name, email address, company name, and message content submitted through our HubSpot-powered contact form
Usage data — HubSpot may collect cookies and analytics data when you interact with our forms (see Section 5)

SurfaceIQ platform users:

Account information — email address, name, and role provided during account creation
Authentication data — securely hashed passwords, MFA credentials, session tokens
Usage data — audit logs of platform actions for security and compliance

Organizations assessed by SurfaceIQ:

Public data only — publicly accessible information associated with the organization's external footprint. SurfaceIQ does not access internal networks, endpoints, or private systems.

3. How We Use Information

To respond to your inquiries and provide requested services
To deliver external attack surface assessments and risk reports
To maintain and improve the security of our platform
To comply with legal obligations

We do not sell, rent, or trade personal information to third parties.

4. Third-Party Services

We use a limited number of third-party service providers for website hosting, form processing, email delivery, cloud infrastructure, and report generation. These providers process data only as necessary to deliver their services and are bound by their own privacy policies. A detailed list of subprocessors is available in our Data Processing Addendum, provided to clients under NDA.

5. Cookies and Tracking

This website uses a HubSpot form embed that may set cookies when you interact with the contact form. We do not use Google Analytics, Facebook Pixel, or other third-party tracking tools on this website.

HubSpot cookies are used solely for form functionality and are subject to HubSpot's Privacy Policy.

You can manage cookies through your browser settings. Blocking cookies will not affect your ability to view this website, but may prevent form submissions.

6. Data Security

We implement industry-standard security measures including:

AES-256 encryption at rest for all stored data
TLS 1.3 encryption for all data in transit
Role-based access controls with multi-factor authentication
Daily encrypted backups with cross-region replication
Alignment with the NIST Cybersecurity Framework 2.0

7. Data Retention

Website form submissions are retained in HubSpot for the duration of our business relationship. Platform data is retained per our service agreement, with deletion available upon request. Generated reports expire after 7 days; permanent archives are encrypted and retained per contractual obligations.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

Access — request a copy of the personal data we hold about you
Correction — request that inaccurate data be corrected
Deletion — request that your personal data be deleted
Portability — receive your data in a machine-readable format
Objection — object to certain types of data processing

To exercise any of these rights, contact us at privacy@leveragecyber.com.

9. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act. We do not sell personal information. To submit a verifiable consumer request, contact privacy@leveragecyber.com.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be posted on this page with an updated revision date.

11. Contact

Leverage Cyber
Dallas, Texas
privacy@leveragecyber.com