Privacy Policy
Effective Date: October 20, 2025
Last Updated: October 20, 2025
Company: Defendra.io, Computerlog, LLC
Address: 7920 Belt Line Rd, Suite 720, Dallas, TX 75254, USA
Website: https://defendra.io
Contact: support@defendra.io
1. Introduction
Defendra, Inc. (“Defendra,” “we,” “our,” or “us”) is a Texas-based cybersecurity services company dedicated to protecting organizations, professionals, and individuals from digital threats through advanced cybersecurity solutions, advisory services, monitoring, and incident response.
This Privacy Policy explains how we collect, use, protect, and disclose your personal information when you use our services, visit our websites, engage in communications, or interact with us through any digital or physical channel.
We are committed to maintaining transparency and compliance with global privacy frameworks, including:
United States Federal and State Privacy Laws (CCPA, CPRA, TDPSA, VCDPA, CPA, UCPA, CTDPA)
European Union GDPR and UK Data Protection Act 2018
Canada’s PIPEDA
Brazil’s LGPD
Australia’s Privacy Act
Singapore and Malaysia PDPA
By accessing Defendra services or websites, you acknowledge and consent to this Privacy Policy.
2. Scope
This policy applies to:
All websites operated by Defendra, including https://defendra.io and associated portals.
All cybersecurity services, including threat detection, incident response, managed security, consulting, and audits.
Customer onboarding, subscription, marketing, and account management systems.
All communication channels, including support emails and secure ticketing systems.
It does not apply to third-party entities or integrations that Defendra does not control. Such parties are governed by their own privacy policies.
3. Information We Collect
Defendra collects information to deliver professional cybersecurity services and protect client systems effectively.
A. Information You Provide
When you interact with Defendra, you may voluntarily provide:
Account & Contact Information: Name, company, email address, phone number, username, and password.
Service Engagement Data: Project scope, security assessments, and reports shared under confidentiality.
Billing & Payment Information: Company address, billing details, and payment method (processed securely).
Communications: Messages with our support, sales, or incident response teams.
Recruitment Data: Resumes, background details, or references (for employment or contract applications).
B. Information Collected Automatically
When using our platforms or receiving managed services:
IP address, browser type, operating system, and device identifiers.
Log data, traffic metadata, threat indicators, and diagnostic telemetry.
Cookies or similar tracking tools are used for analytics and authentication purposes.
C. Third-Party Sources
We may obtain additional data from:
Business partners, resellers, or affiliates.
Public registries, professional networks, and threat intelligence feeds.
Government or regulatory sources, where permitted by law.
4. Purpose and Use of Information
Defendra uses collected information to:
Provide Cybersecurity Services: Deliver penetration testing, threat detection, and managed defense services.
Manage Accounts: Register users, authenticate access, and support client contracts.
Security Operations: Detect, prevent, and respond to attacks, breaches, or suspicious behavior.
Billing and Invoicing: Process payments, manage renewals, and maintain transaction records.
Customer Support: Respond to service requests and technical issues.
Compliance: Fulfill legal, regulatory, or audit obligations.
Communications: Send security updates, advisories, or educational materials.
R&D: Improve security tools, threat models, and service performance.
Employment Management: Evaluate and manage employment or contractor applications.
We do not use personal information for profiling, automated decision-making, or sale to third parties.
5. Legal Basis for Processing
For users covered by international privacy laws (e.g., GDPR, UK DPA, LGPD), Defendra processes data under these lawful bases:
Contractual necessity: To fulfill service agreements.
Legitimate interests: For cybersecurity, threat prevention, and operational efficiency.
Legal compliance: To satisfy tax, export, or security regulations.
Consent: For marketing or optional communications.
Public interest: For global threat intelligence sharing and security awareness.
6. Data Sharing and Disclosure
Defendra never sells personal information.
We may share limited data under these conditions:
Service Providers: Hosting, email, payment, and support vendors are bound by strict confidentiality.
Partners: Authorized resellers or technology affiliates assisting in service delivery.
Legal Obligations: To comply with subpoenas, court orders, or lawful government requests.
Corporate Transactions: If Defendra merges, acquires, or reorganizes its business.
Security Collaboration: To share anonymized threat intelligence within trusted cybersecurity networks (ISAC, CERT).
7. Data Retention
Defendra retains information for as long as necessary to:
Fulfill our service contracts.
Meet legal or regulatory requirements.
Support security investigations or audits.
Maintain accurate business and billing records.
Once no longer required, data is securely deleted or anonymized in accordance with NIST SP 800-88 media sanitization standards.
8. Security and Protection Measures
As a cybersecurity company, Defendra maintains industry-leading protection:
Encryption: AES-256 for data at rest; TLS 1.3 for data in transit.
Access Controls: Role-based permissions, MFA, and least-privilege principles.
Monitoring: 24/7 SOC operations, log correlation, intrusion detection.
Penetration Testing: Regular internal and third-party security assessments.
Incident Response: Documented and tested plan aligned with ISO/IEC 27035.
Certifications: Alignment with ISO 27001, SOC 2 Type II, and NIST CSF.
9. Cookies and Web Tracking
We use cookies and similar technologies to:
Enable secure login and user sessions.
Improve website performance and navigation.
Conduct anonymous analytics to improve usability.
Provide optional marketing personalization with consent.
You can disable non-essential cookies via browser settings.
10. Your Rights
Depending on your jurisdiction, you have rights to:
Access your data and obtain copies.
Could you correct inaccurate or incomplete information?
Delete or anonymize your data (“Right to Erasure”).
Restrict processing under certain circumstances.
Object to processing or withdraw consent.
Data Portability (export structured machine-readable copies).
Non-Discrimination for exercising privacy rights.
To exercise these rights, contact support@defendra.io or privacy@defendra.io.
We will verify your identity before we ask.
11. Data Transfers
Defendra provides services globally.
When personal data is transferred outside your jurisdiction:
Transfers are protected under Standard Contractual Clauses (SCCs) or equivalent mechanisms.
Data hosting and backup locations maintain adequate privacy safeguards.
Clients receive signed Data Processing Addenda (DPA) for enterprise contracts.
12. Children’s Data
Defendra does not offer services intended for individuals under 16 years of age and does not knowingly collect information from them.
If such data is found, it will be deleted promptly.
13. U.S. State-Specific Privacy Notices
Texas (TDPSA)
As a Texas-registered corporation, Defendra complies with the Texas Data Privacy and Security Act, ensuring strong encryption, rapid breach notification, and explicit consent for sensitive data.
California (CCPA/CPRA)
California residents have the right to:
Request access, correction, or deletion of personal data.
Opt out of sale or sharing (Defendra does not sell data).
You can limit the use of sensitive personal information for cybersecurity purposes.
Colorado, Connecticut, Utah, and Virginia
Residents may confirm processing, correct inaccuracies, delete data, or opt out of profiling and targeted advertising.
Requests may be appealed if initially denied.
14. Global Compliance
Defendra complies with worldwide privacy standards:
GDPR (EU/UK) – Data protection by design and user consent controls.
PIPEDA (Canada) – Accountability and individual access rights.
LGPD (Brazil) – Lawful bases and transparency.
APPI (Japan) – Cross-border safeguards and retention limits.
PDPA (Singapore, Malaysia) – Purpose limitation and consent principles.
Privacy Act (Australia) – Data Minimization and Breach Reporting.
We continuously monitor updates to global privacy frameworks.
15. International Data Security and Hosting
Our systems may be hosted in the United States, Canada, or other regions, subject to strict data protection agreements and regulations.
Defendra enforces encryption and contractual clauses across all vendors to maintain compliance and integrity.
16. Data Breach Response
In the event of a security incident:
Our SOC immediately investigates and isolates affected systems.
We inform affected customers and regulators of their legal requirements.
A remediation plan is executed and documented.
Clients receive detailed post-incident reports.
We comply with Texas Business & Commerce Code §521, CCPA §1798.82, and GDPR Articles 33–34.
17. Data Protection Officer (DPO)
Defendra Data Protection Officer
Defendra, Inc.
7920 Belt Line Rd, Suite 720
Dallas, TX 75254, USA
privacy@defendra.io
The DPO oversees privacy compliance, audits, and the handling of requests.
18. International Representatives
For European Economic Area (EEA) and UK customers, Defendra appoints a representative in accordance with Article 27 of the GDPR.
I will provide details when you request privacy at defendra.io.
19. Data Retention and Deletion Policy
Retention durations depend on service type, contract, or regulation:
Active Clients: Data retained throughout service period plus 3 years.
Incident Logs: Retained up to 12 months for forensic continuity.
Legal/Tax Records: Kept per U.S. and international accounting laws.
Marketing Lists: Deleted upon request to opt out.
Defendra follows secure erasure, overwriting, and cryptographic wipe standards.
20. Third-Party Links and Integrations
Our platforms may link to or integrate with third-party services (e.g., AWS, Azure, Google Cloud, payment processors).
Defendra is not responsible for their privacy practices; please review their policies separately.
21. Do Not Track and Automated Decisions
Defendra does not use “Do Not Track” browser signals, as no global standard for this feature exists.
We do not engage in automated decision-making that significantly affects users.
22. Updates to This Policy
We reserve the right to update this policy to reflect new laws, technologies, or changes in our business operations.
Revisions will be dated at the top of this page.
Significant updates will be communicated directly to clients via email or portal notifications.
23. Contact Information
If you have privacy questions, complaints, or requests, contact:
Defendra.io, Computerlog, LLC
Attn: Privacy Department
7920 Belt Line Rd, Suite 720
Dallas, TX 75254, USA support@defendra.io | privacy@defendra.io
https://defendra.io
24. Summary of Commitments
Defendra’s approach to privacy rests on five key principles:
Transparency: We disclose clearly what we collect and why.
Security: Protection of your data is our professional obligation.
Control: You retain rights over your personal information.
Compliance: Our practices align with U.S. and global standards.
Accountability: We uphold strong governance and review mechanisms.