exposentraby CyberHunter
Get access ↗

Legal and transparency

Exposentra Privacy Notice

This notice explains how CyberHunter Ltd handles personal data when you visit the Exposentra website, request early access or use the Exposentra platform.

Last updated: 23 August 2026
Controller

CyberHunter Ltd, Cyprus
info@cyberhunter.biz

1. Scope

This notice applies to the Exposentra marketing website, mobile application, web platform, early-access process, support communications and related platform services. A customer organisation may also act as a controller for the business information it places in its workspace and for its authorised users.

2. Personal data we may process

  • Account information: name, business email address, authentication information, account state and preferences.
  • Organisation information: company name, workspace membership, assigned role and administrator relationships.
  • Asset information: domains, public IP addresses, verification state and information demonstrating authority to assess an asset.
  • Assessment information: publicly observable security signals, scores, findings, observations, scan history and user workflow decisions.
  • Support and communication information: early-access requests, support cases, comments and correspondence.
  • Technical and security information: IP address, device or browser information, session events, diagnostic data, notification tokens and delivery state, and security logs.
  • Commercial information: subscription state and transaction references if paid plans are introduced. Payment-card details would normally be handled by the relevant payment or app-store provider rather than stored directly by Exposentra.

3. Where the information comes from

We receive information directly from you or your organisation, from platform use, from security and hosting systems, and from publicly accessible internet sources when conducting an authorised external assessment.

4. Purposes and legal bases

PurposeTypical legal basis
Create accounts, operate workspaces and provide assessmentsPerformance of a contract or steps requested before a contract
Authenticate users, prevent misuse and protect the platformLegitimate interests in service and information security; legal obligations where applicable
Provide support, service notices and requested communicationsContract, legitimate interests or consent depending on the communication
Maintain and improve reliability and usabilityLegitimate interests, using proportionate and minimised information
Send optional marketing or non-essential notificationsConsent where required; you may withdraw it
Meet accounting, legal and regulatory requirementsCompliance with legal obligations

5. Assessment data and automated scoring

Exposentra uses automated rules to organise externally observable security information and calculate posture indicators. These indicators support cybersecurity decisions; they are not intended to make decisions that produce legal or similarly significant effects about an individual. Scores are not certifications or guarantees of security.

6. Recipients and service providers

Information may be shared, only as needed, with infrastructure and hosting providers, email and notification delivery providers, app-store or payment providers when applicable, professional advisers, and authorities where disclosure is legally required. Customer organisation administrators may access information associated with their workspace and users.

7. International transfers

Some service providers may process information outside Cyprus or the European Economic Area. Where required, we use an appropriate transfer mechanism and safeguards recognised under applicable data-protection law.

8. Retention

We retain personal data only for as long as needed for the purposes described above, including providing the service, maintaining security and audit evidence, resolving disputes and meeting legal obligations. Retention depends on the data category and customer relationship. Following a verified deletion request, data is deleted or anonymised unless a limited record must be retained for a lawful purpose. Backup copies may be removed on the applicable backup rotation.

9. Your rights

Depending on the circumstances, you may request access, correction, erasure, restriction, portability or object to processing. You may withdraw consent without affecting earlier lawful processing. Submit a request to info@cyberhunter.biz. We may need to verify your identity and organisation relationship before acting.

You may also lodge a complaint with a competent supervisory authority, including the Office of the Commissioner for Personal Data Protection in Cyprus. The European Commission provides an overview of individual GDPR rights.

10. Cookies and similar technologies

The marketing website is designed without advertising trackers. Hosting systems may process standard access and security logs. The authenticated platform may use strictly necessary session technologies to keep users signed in, protect accounts and remember essential preferences. Any non-essential analytics or marketing technology introduced later will be addressed through an appropriate notice and choice mechanism.

11. Security

We use technical and organisational measures intended to protect personal data, including access control, tenant-aware authorisation, session controls and operational monitoring. No online service can guarantee absolute security. Please report suspected security issues privately rather than publishing customer or vulnerability details.

12. Children

Exposentra is a business service and is not directed to children. Users must be authorised adults acting for an organisation.

13. Changes and contact

We may update this notice as the service, providers or legal requirements change. Material changes will be communicated through an appropriate channel. Questions and requests may be sent to info@cyberhunter.biz.