Legal
Privacy Policy
Last updated 28 July 2026
We are a security company, so we will keep this direct. We collect a work email address, a name you choose, and how you get on with the challenges. We do not collect passwords, we do not look at your device, and we do not sell anything to anyone.
Who we are
AwareSprint is operated by Cyberneticsplus Services Pvt Ltd, incorporated in India and serving customers internationally. We are the controller of the data described below. Where an employer deploys AwareSprint for its workforce, that employer decides who takes part, and we handle the data on the basis set out here.
What we collect and why
| Data | Why we hold it | Basis |
|---|---|---|
| Work email address | To verify you belong to your organisation, to group you with colleagues from the same email domain, and to send you the code that signs you in. | Necessary to provide the service you asked for. |
| Display name | To show your position on your company leaderboard. You choose what this says and it does not have to be your full name. | Necessary to provide the service you asked for. |
| Company registration details | The contact name, company name, size band and region submitted when registering a company, used to set up the group and route it to the right prize pool. | Necessary to provide the service you asked for. |
| Progress through the challenges | Which challenges you started and finished, your answers, your score and the times involved. This produces your standing and your organisation completion record. | Necessary to provide the service you asked for. |
| Country of your connection | Derived from your network address so we can show prices in the right currency and route you to the correct regional pool. | Necessary to provide the service you asked for. |
| Technical request data | Network address, browser and device type, recorded by our infrastructure provider to keep the service available and to defend against abuse. | Our legitimate interest in operating a secure service. |
What we do not collect
- Passwords. Sign in uses a code sent to your email and nothing is stored.
- Anything from your device. No agent, no browser extension, no access to your files, contacts, camera or location.
- Real credentials. Challenges are simulations and will never ask you to enter a genuine password or a real customer record.
- Special category data. We do not ask for health, biometric, financial or demographic information.
- Your personal email or phone number. A work email address is all we need.
What your employer can see
If your organisation runs a campaign, an administrator at your organisation can see who was invited, who took part and who completed, along with scores and standings. They cannot see your individual answers to any question. Nobody, including administrators, can see a ranking of who scored lowest. We designed it this way on purpose.
Who processes data for us
| Provider | What they do | Where |
|---|---|---|
| Cloudflare | Hosting, content delivery, edge compute and stored records | Global network |
| ZeptoMail | Sending verification and service email | India |
| Google Analytics | Page and visit measurement, only with your consent | Global |
We do not sell personal data and we do not share it for advertising. If this list changes we will update this page and the date at the top of it.
Cookies
We use Google Analytics to understand which pages are useful. It sets one analytics cookie, and only after you accept it. Until you do, consent is denied and nothing is stored. You can decline and the site works exactly the same. Advertising and personalisation signals are switched off permanently, because we run no advertising. Our infrastructure provider may also set a cookie to tell genuine visitors from automated traffic, which is required to keep the service available.
How long we keep it
Registration details are kept while your organisation is using AwareSprint. Campaign records are kept for as long as your employer needs them as training evidence, which is usually governed by the standard they are being audited against. If you ask us to delete your data, or your organisation ends its use of the service, we remove personal data within 30 days except where we are required to retain something.
Your rights
You can:
- Ask what personal data we hold about you and get a copy of it
- Ask us to correct anything inaccurate or incomplete
- Ask us to erase your data, subject to any record we must keep
- Withdraw consent where we relied on it, without affecting what came before
- Nominate another person to exercise these rights on your behalf if you are unable to
- Object to how we are using your data, and complain to us directly
Your local law may give you further rights, or describe these ones differently. We apply this policy to everyone regardless of where you are, and if your jurisdiction grants you something beyond what is listed here, ask us and we will honour it. You can also complain to the data protection authority where you live.
If something goes wrong
If we become aware of a personal data breach affecting you we will notify you and the relevant authority as the law requires. We maintain an incident response process, which for a security company is the minimum you should expect. How the platform is secured, and how to report a vulnerability, is covered on the security page.
Contact us
Write to privacy@awaresprint.com for anything on this page, including a request to see or delete your data, or to raise a grievance. We aim to respond within 30 days.
Cyberneticsplus Services Pvt Ltd. Registered in India.