Onyx Privacy Policy

Last Updated - March 2, 2025

In order to ensure transparency and give you more control over your Personal Data (as defined below), this privacy policy (“Privacy Policy”) governs how we, Onyx Security Inc (“Onyx”, “we”, “our” or “us”) use, collect and store Personal Data that we collect or receive from or about you (“you”) in connection with https://onyx.security/ (the “Website”). “Personal Data” means any information that can be used, alone or together with other data, to uniquely identify any living human being and any information deemed as Personally Identifiable Information by privacy laws.

We greatly respect your privacy, which is why we make every effort to provide a platform that would live up to the highest user privacy standards. Please read this Privacy Policy carefully, so you can fully understand our practices in relation to Personal Data. Please note that this is a master privacy policy and some of its provisions only apply to individuals in certain jurisdictions. Important note: Nothing in this Privacy Policy is intended to limit in any way your statutory rights, including your rights to a remedy or other means of enforcement. 

Table of contents: 

  1. What Personal Data we collect, why we collect it, and how it is used

  2. How we protect and retain your Personal Data

  3. How we share your Personal Data

  4. Your privacy rights 

  5. International transfers of Personal Data

  6. Use by children

  7. Interaction with third party products

  8. Contact us



This Privacy Policy can be updated from time to time and, therefore, we ask you to check back periodically for the latest version of this Privacy Policy.  If we implement material changes in the way we use your Personal Data, in a manner that is different from that stated at the time of collection, we will notify you by posting a notice on our Website or by other means and take any additional steps as required by applicable law.



  1. WHAT PERSONAL DATA WE COLLECT, WHY WE COLLECT IT, AND HOW IT IS USED



  1. When You Interact with Our Website:

  • Personal Data we Process. When you interact with our Website by signing up to our waiting list, we will collect your email address. 

  • Purpose for Processing. To sign up to our waiting list and correspond with you in the future.

  • Legal Basis. Legitimate interest.

  • Consequences For Not Providing Personal Data. You will not be able to register to our waiting list.



Finally, please note that some of the abovementioned Personal Data will be used for detecting, taking steps to prevent, and prosecution of fraud or other illegal activity, to identify and repair errors, to conduct audits, and for security purposes. Personal Data may also be used to comply with applicable laws, with investigations performed by the relevant authorities, law enforcement purposes, and/or to exercise or defend legal claims. In certain cases, we may or will anonymize or de-identify your Personal Data and further use it for internal and external purposes, including, without limitation, to improve our services and for research purposes. “Anonymous Information” means information which does not enable identification of an individual user, such as aggregated information about the use of our services. We may use Anonymous Information and/or disclose it to third parties without restrictions (for example, in order to improve our services and enhance your experience with them).



  1. HOW WE PROTECT AND RETAIN YOUR PERSONAL DATA 



  1. Security. We implement and maintain industry-standard technical, organizational and security measures designed to protect your Personal Data. However, please note that we cannot guarantee that the Personal Data will not be compromised as a result of unauthorized penetration of our servers. As the security of information depends in part on the security of the computer, device or network you use to communicate with us and the security you use to protect your user IDs and passwords, please make sure to take appropriate measures to protect this information.

  2. Retention of your Personal Data. Your Personal Data will be stored until we proactively delete it from our records, or until you send a valid deletion request. Please note that in some circumstances we store your Personal Data for longer periods of time, for example (i) where we are required to do so in accordance with legal, regulatory, tax or accounting requirements, or (ii) for us to have an accurate record of your dealings with us in the event of any complaints or challenges, and/or (iii) if we reasonably believe there is a prospect of litigation relating to your Personal Data or dealings. 



  1.  HOW WE SHARE YOUR PERSONAL DATA 



We may share your Personal Data as follows: 

  1. The Personal Data Onyx gathers may be shared with our partners and other third parties. 

  2. We also share Personal Data about you with our affiliated companies. 

  3. We use third party service providers to process your Personal Data for the purposes outlined above, including, without limitation: (i) with cloud service providers for hosting purposes; (ii) with websites and web content creation platforms in order to help us manage our Website; and (iii) with email providers, marketing, CRM, other similar tool providers.

  4. To the extent necessary, with regulators, courts, banks or competent authorities, to comply with applicable laws, regulations and rules (including, without limitation, federal, state or local laws), and requests of law enforcement, regulatory and other governmental agencies or if required to do so by court order, as well as for internal compliance procedures and to protect the safety, security, and integrity of Onyx, our services, customers, employees, property, and the public. We may use or disclose the Personal Data we collect in order to ensure that our users are complying with all applicable aspects of our policies.

  5. We may disclose Personal Data with our lawyers, accountants, auditors and other professional advisors where necessary to obtain legal or other advice or otherwise protect and manage our business interests.

  6. We may use or disclose Personal Data to investigate, prevent, or take action regarding illegal activities, suspected fraud, cybersecurity threats, situations involving potential threats to the physical safety of any person, violations of this policy, or as otherwise required or allowed by law and regulations.

  7. If, in the future, we sell or transfer, or we consider selling or transferring, some or all of our business, shares or assets to a third party, we will disclose your Personal Data to such third party (whether actual or potential) in connection with the foregoing events (including, without limitation, our current or potential investors). In the event that we are acquired by, or merged with, a third party entity, or in the event of bankruptcy or a comparable event, we reserve the right to transfer, disclose or assign your Personal Data in connection with the foregoing events.

  8. Where you have otherwise provided your consent to us for sharing or transferring your Personal Data.



  1. YOUR PRIVACY RIGHTS

    1. The following rights (which may be subject to certain exemptions or derogations) shall apply to certain individuals (some of which only apply to individuals protected by specific laws):

      1. You have a right to access Personal Data held about you. Your right of access may normally be exercised free of charge, however we reserve the right to charge an appropriate administrative fee where permitted by applicable law;

      2. You have the right to request that we rectify any Personal Data we hold that is inaccurate or misleading;

      3. You have the right to request the erasure/deletion of your Personal Data (e.g. from our records). Please note that there may be circumstances in which we are required to retain your Personal Data, for example for the establishment, exercise or defense of legal claims;

      4. You have the right to object, to or to request restriction, of the processing;

      5. You have the right to data portability. This means that you may have the right to receive your Personal Data in a structured, commonly used and machine-readable format, and that you have the right to transmit that data to another controller;

      6. You have the right to object to profiling;