DRAFT - requires counsel review before the first paying client; employee-monitoring and consent rules vary by state and country.
Aegis privacy notice
Notice version 2026-10-03-v1
Who runs this program
This security awareness program is run by the organization named in your invitation. It is administered for that organization by CyberShield Technologies LLC (Woodstock, Georgia, USA).
What we collect
- Your name, work email address and role.
- Your training answers and scores, and your certificate.
- Timestamps of when you registered, completed training, were sent a simulated phishing email, clicked its link, and tried to sign in on the simulated page.
- The IP address and browser (user agent) of the device that clicked the link. We keep these for 90 days after the campaign completes, then delete them.
- Whether the value you typed into the simulated sign-in box matched your own email address (yes or no). We do not keep what you typed.
What we never collect
We never collect passwords. The sign-in page is a simulation, and password values are never read, sent or stored.
Why
Security awareness training, and evidence of that training for insurance and compliance purposes.
Who sees it
The program administrators at CyberShield Technologies LLC, and the contacts your organization has designated for the program.
How long we keep it
- Outcome records (training, simulation results and consent): for your organization's retention period. The default is 5 years.
- Certificates: 5 years.
- Click IP address and browser: 90 days after the campaign completes.
We do not sell your data
We do not sell or rent your data to anyone.
Access and deletion
To ask what we hold about you, or to ask us to delete it, email chris@cybershield-llc.com. We may keep limited records that show your organization authorized the program and that you consented.
Consent record
When you tick the consent box we store the time and the version of this notice that you saw.