Privacy policy
CyberGuard is a security monitoring service operated by Green Universal Services (“GusForce”, “we”). This page explains, in plain language, what information CyberGuard handles, why, and what you can ask us to do with it.
What we collect
- Your account: your name, email address, the organization you belong to and your role in it. Sign-in is handled by our database provider; we never see or store your password in readable form.
- The platforms you register: web addresses, names, an optional link to the code repository, and the contact details you enter as the person to notify.
- Scan results: what our daily checks observe from the outside — security headers, certificate details, DNS and email-security records, whether sensitive files are publicly reachable, and similar facts that anyone on the internet could see.
- Code dependency lists: if you link a repository, we read its dependency files (for example
package-lock.json) to check for known vulnerabilities. We don’t copy or store your source code. - Records of what we did: fixes proposed or applied with Go Fix, reports sent, and alerts you acknowledged.
- Technical logs: our hosting provider records requests to the app (including IP addresses) to keep it running and secure.
How we use it
Only to run CyberGuard for you: scanning your platforms, showing results, sending the alerts and reports you choose, and making the fixes you ask for. We don’t sell your information, use it for advertising, or share it with anyone except the service providers listed below.
Who else handles it
- Supabase — database and sign-in. Sees: account details, platforms you register, and scan results.
- Vercel — hosting; runs the scheduled scans. Sees: request logs, including IP addresses.
- Resend — sending email (alerts, reports, invitations). Sees: recipient email addresses and the message.
- OSV.dev (Google) — looking up known vulnerabilities. Sees: names and versions of the software packages your code uses — no personal data.
- GitHub — reading dependency files and opening go fix pull requests, for repositories you link. Sees: the dependency files we read and the changes we propose.
- Cloudflare — applying dns and https fixes when you choose go fix. Sees: the specific DNS records or settings being changed.
How long we keep it
We keep your account and scan history while your organization uses CyberGuard. Removing a platform stops its scans and hides it; its history is kept so past reports stay accurate. If you want any of it deleted — a platform’s history or your whole account — email us and we’ll do it.
How we protect it
Each organization’s data is separated at the database level, so members of one organization can’t see another’s. Connections are encrypted. Access inside an organization follows roles (owner, operator, viewer).
Your choices and rights
- See, correct or delete the information we hold about you.
- Turn alert and report emails on or off for yourself in Settings → Notifications.
- Ask us any question about how your information is used.
Email security@gusforce.ai for any of these.
Changes
If we change this policy in a way that matters, we’ll tell account owners by email before it takes effect.