Two streams get covered. The first one comes in over this storefront and reaches Fortify 24x7. The second gets thrown off by circuits already running. Things here are named rather than gestured at, which is the only way a page of this sort earns its place.
This version dated 29 August 2026Trading name, CyberSec Managed. Company, Fortify 24x7. Decisions about information reaching this storefront, and about information the circuits throw off while running, belong to that company. The word we, on this page, means that company.
Questions land at help@cybersecmanaged.com and a person opens them.
No analytics tag runs here. Nothing trails your visit. No picture of you is being assembled. No marketing script has been lifted from elsewhere. Three items get stored or logged, and that is the lot.
Stripe runs it. Card details are typed onto a page Stripe serves, not onto a page we serve. Long number, expiry, three digits on the reverse: not one of them arrives here, and not one enters anything we run.
Very little travels back. Somewhere to write to. A trading name. Which circuits were bought, at what quantities. Whether the subscription is paid up. Two internal Stripe references, one against the customer and one against the subscription.
Operating a product on your behalf means touching what your enrolled systems throw off. Which of these applies comes down to which circuits you hold.
Every item above is touched on your instruction, so as to deliver what was bought. Mining it is no part of our business, and nobody here is selling it. Take that as fixed. It is not a stance that moves with the market.
A call opened in the portal, or by post, produces a record: subject, description, notes added by operators, any attached files. The record sits in our service management system, because the account of a problem belongs beside the problem.
Managed work happens on other companies' platforms. Everyone below holds data for us under contract, publishes a notice of its own, and is worth reading.
Outside that list we disclose where the law requires it and nowhere else. Personal information is not a thing we do, and none of it reaches advertisers who trail people from one website to the next.
Account and billing records outlive the subscription, then last as long again as bookkeeping and tax law require. Security records follow whatever retention belongs to the circuit, printed on its position page or agreed while scoping. Captures follow the retention you chose.
Closing an account happens in conversation. There is no button. Say the word and you get it in writing: what is removed, and on which date. Speed of destruction depends on the platform holding a capture, so the answer describes your own arrangement rather than a general one.
Where you live may give you a right of access, of correction, of erasure, or of objection to one particular use. Put it to us and it gets worked through. Asking is free, and nobody gets treated differently for having asked.
Where material is handled for a business customer, employees of that firm should approach their employer first. We will help the employer respond.
An operator enters a customer environment when the work needs them there and not otherwise. Our own sign in needs more than a password. Actions inside a customer tenant are logged. All that describes practice. None of it promises that nothing will ever fail, and the sentence which sounds like such a promise belongs in a sales deck.
A material change moves the date printed up at the top. Should one affect information already handed to us, account holders get contacted rather than left to notice.