Privacy notice

1. Who we are

Sayf Cyber Solutions is an independent offensive security practice operating remote-first across Jordan and the United States. For the purposes of this notice, Sayf Cyber Solutions is the data controller of any personal data submitted through this website or sent to our published email address.

Contact: info@sayfcybersolutions.com · +1 (914) 423-6997 · +1 (914) 423-7500

2. What we collect

This site is a static landing page. It does not run analytics, advertising trackers, or third-party cookies. The only personal data we receive from the website is what you choose to send us when you start an email to our published address.

When you email us, we receive:

• Your name and email address;
• The content of your message and any attachments;
• Standard email metadata (timestamps, mail routing headers).

Web fonts on this site are loaded from Google Fonts. Loading a font file involves an HTTP request to Google's servers, which can see the requesting IP address. We do not control this; if you prefer to avoid it, browser extensions that block third-party requests will prevent the font request without breaking the site.

3. How we use it

• To respond to your inquiry and discuss potential work;
• To assess scope, fit, and feasibility before any engagement;
• To keep a record of correspondence for a reasonable period after the conversation ends.

We do not sell, rent, or share personal data with third parties for marketing. We do not add inquirers to a mailing list.

4. Legal basis

Where the GDPR or comparable laws apply, our legal bases are legitimate interests (responding to a business inquiry you initiated) and, where a contract is being formed, steps prior to entering a contract at your request.

5. Retention

We retain inquiry emails for as long as needed to evaluate the opportunity and for a reasonable period afterwards for record-keeping and conflict checks. Inquiries that do not lead to an engagement are deleted on request and otherwise periodically.

6. Security

This site is served over HTTPS. Inquiry email is handled in a standard business mailbox with multi-factor authentication. We ask that you do not send sensitive technical detail — including credentials, exploitation traces, or production data — over unencrypted email; we will agree on a secure channel before any such material is exchanged.

7. Your rights & data inquiries

Depending on your jurisdiction, you may have the right to access, correct, or delete personal data we hold about you, to restrict or object to its processing, or to receive a copy in a portable format. To exercise any of these rights, write to info@sayfcybersolutions.com with the subject line "Privacy request". We will respond within a reasonable time, typically within 30 days.

8. Responsible disclosure

If you believe you have found a security issue affecting this website or our infrastructure, please contact us at info@sayfcybersolutions.com with the subject line "Security report". We commit to:

• Acknowledging your report within 5 business days;
• Working with you in good faith to validate and remediate;
• Not pursuing legal action against good-faith researchers who follow this notice, avoid privacy violations and service degradation, and give us a reasonable window to remediate before any public disclosure.

9. Changes

We may update this notice as our practices or applicable law evolve. The "Last updated" date above will always reflect the current version.