Home / Privacy
Privacy Policy
Effective 2022-10-03 · Last updated 2025-06-09
This policy explains how Anobis Inc (“Worlds CyberSec”, “we”) handles personal information on worldscybersec.com, in the client portal, and in the course of providing security services. Where we process data on behalf of a client under a services agreement, that agreement and the trust page govern how client data is handled; this policy covers personal information about website visitors, prospects, client contacts and the individuals whose data appears in security telemetry.
1. What we collect on this website
Contact and quote requests: name, company, work email, phone, the services you ask about, environment sizes and anything you write. Standard server logs: IP address, browser, pages visited and referrer, kept for 90 days. We do not run advertising trackers and we use no cross-site cookies.
2. What we collect to deliver services
To open an account: the legal name and address of the client, the names, work emails and mobile numbers of technical and executive contacts, and billing details. In the course of monitoring: security telemetry from endpoints, identity providers, email platforms and cloud accounts, which includes usernames, device names, IP addresses, process and file names, email metadata and, for alerts, the content needed to judge them. In the course of assessments: the evidence needed to document findings. In the course of incident response: forensic images, logs and, where an incident involves it, the business or personal data the attacker reached.
3. How we use it
To detect, investigate and contain threats; to deliver assessments, compliance work and incident response; to report to the client; to invoice and collect; to answer requests; to improve detection content in aggregated, de-identified form; and to meet legal obligations. We do not sell personal information, we do not use it for advertising, and we do not use client telemetry to train models offered to anyone else.
4. Sharing
With sub-processors under contract that run the tools we use: endpoint detection, SIEM, vulnerability scanning, awareness training, compliance evidence, email, documents, hosting, payment processing and invoicing. The current list is on the trust page. With a client's auditor, insurer, counsel or law enforcement when the client directs us to. With authorities when the law requires it, after reviewing the request and notifying the client unless prohibited. In a merger or sale, under the same commitments.
5. Payments
Card and bank account details are entered on our payment processor's forms and stored by them. We keep a token and the last four digits. See the processor's privacy policy for its handling of that data.
6. Retention
Security telemetry is kept for the retention period on the client's plan, from 90 days to 24 months. Case records, reports, assessment evidence and incident reports are kept for seven years to support audits, insurance and legal holds. Contact and quote requests that do not become engagements are deleted after two years. Client contact and billing records are kept for seven years after the engagement ends. Data is deleted within 30 days of a written request after an engagement ends, except where law or a litigation hold requires otherwise.
7. Security
Encryption in transit and at rest, hardware-key multi-factor authentication for every employee, role-based access limited to the people assigned to an account, managed devices with endpoint detection, logging of every access to client data, background checks before anyone touches a client system, and an annual penetration test of the client portal by an outside firm. No system is perfectly secure; if a breach affects you we will notify you as our agreement and California law require.
8. Your choices and rights
You can ask us what we hold about you, correct it, or ask us to delete what we are not required to keep, by emailing sales@worldscybersec.com. You can opt out of marketing email with the link in any message; service, advisory and billing notices continue while you are a client contact. California residents have the rights the California Consumer Privacy Act provides, and we honor them without discrimination. We do not sell or share personal information as those terms are defined in that law. Individuals whose data appears in a client's telemetry should direct requests to that client; we assist the client in responding.
9. Cookies
The website uses a session cookie for forms. The client portal uses cookies needed to keep you signed in and to detect session hijacking. We do not use advertising cookies.
10. Changes
We will post changes here with a new “last updated” date and notify client contacts by email of material changes at least 30 days before they take effect.
11. Contact
Anobis Inc
12872 Gingerwood Ct, Corona, CA 92880
sales@worldscybersec.com