Skip to content

Legal

Privacy Policy

Last updated: August 19, 2026

This Privacy Policy is issued by CIMP Pty Ltd (ABN 68 666 477 014), Sydney, Australia, trading as CyberGoBag (“CyberGoBag”, “we”, “us”). It covers the cybergobag.com website, the CyberGoBag web platform, and the CyberGoBag mobile apps. Looking for how to delete your account? See Account and data deletion.

1. Information We Collect

We collect information you provide directly to us when you create an account, use our services, or communicate with us. This includes your name, email address, organization name, and any data you input into the CyberGoBag platform. We also collect usage data such as IP addresses, browser type, device identifiers, pages visited, and actions taken within the platform.

2. How We Use Your Information

We use the information we collect to provide, maintain, and improve our services; process transactions and send related information; send technical notices, updates, security alerts, and administrative messages; respond to your comments, questions, and support requests; monitor and analyze trends, usage, and activities in connection with our services; and detect, investigate, and prevent fraudulent transactions and other illegal activities.

3. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information with trusted service providers who assist us in operating the platform, conducting our business, or serving you, provided those parties agree to keep this information confidential. We may also disclose information when required by law or to protect our rights, property, or safety.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. Incident data and evidence stored in FortKnoxx are retained according to your organization's configured retention policies.

5. Security

We implement industry-standard security measures to protect your data, including AES-256 encryption at rest, TLS 1.3 encryption in transit, row-level security for tenant isolation, and comprehensive audit logging. All evidence files are SHA-256 hashed on upload to ensure integrity. Access to production systems is restricted and monitored.

6. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal information; object to or restrict certain processing; data portability; and withdraw consent where processing is based on consent. EU/EEA residents have additional rights under GDPR, and California residents have rights under CCPA. To exercise any of these rights, please contact us at privacy@cybergobag.com. To close your account, see Account and data deletion below.

7. Account and Data Deletion

CyberGoBag accounts belong to a customer organization's workspace and are created by that organization's administrator (or by CIMP Pty Ltd on its behalf) — there is no public sign-up. Deletion works the same way in reverse.

To delete your account and personal data

  1. In the CyberGoBag mobile app: Profile → Delete my account → Email request. This opens a pre-filled email to privacy@cybergobag.com from your account address.
  2. Or email privacy@cybergobag.com from the address on your account with the subject “Account deletion request”, or ask your organization's CyberGoBag administrator to remove you.

We confirm receipt within 2 business days and complete the deletion within 30 days. Deletion removes your account, sign-in credentials, profile details, notification device tokens, and any personal data held about you as a user.

What is not deleted

Incident records, war-room messages, tasks, notes, and evidence you contributed are business records of your organization. They are retained under your organization's own retention policy (and any legal hold), with your name replaced by “Former member” where the record must be kept. Ask your organization's administrator about its retention settings.

Deleting some data without closing your account

Email privacy@cybergobag.com describing the data you want removed; we will action what we can and explain anything your organization must action instead.

Whole-organization deletion

Handled by the organization's administrator through its agreement with CIMP Pty Ltd.

8. Contact

If you have any questions about this Privacy Policy or our data practices, please contact us at:

CIMP Pty Ltd (ABN 68 666 477 014), trading as CyberGoBag
Sydney, Australia
Email: privacy@cybergobag.com
Website: https://cybergobag.com