# Privacy Policy — OTFeed.com

**Last Updated:** August 17, 2026

**OTFeed.com** is a product of **Cyborama LLC**, an Alabama limited liability company.

## What We Collect

When you sign up for OTFeed, we collect:

- **Your name and email address** — for account creation and alert delivery
- **Your organization name and sector** — to improve service relevance
- **Your asset selections** — vendors, products, and protocols you tell us are in your environment
- **Usage data** — which articles you read, feed access frequency, API call patterns
- **Technical data** — IP address, browser type, access timestamps (standard server logs)

## What We Do With It

We use your information to:

1. **Deliver your custom feed** — match threat intelligence to your selected assets
2. **Send alerts** — email and RSS delivery based on your preferences
3. **Improve the service** — understand which vendors, protocols, and sectors matter most
4. **Prevent abuse** — detect and prevent unauthorized access or scraping

## What We DON'T Do

- We **do not sell** your personal information to third parties
- We **do not share** your organization's identity, asset inventory, or sector with vendors, other customers, or any external party
- We **do not publish** which organizations use OTFeed
- We **do not sell** your asset data or infrastructure profile to threat intelligence brokers, advertising networks, or data aggregators
- We **do not** provide your organizational information to CISA, DHS, or any government agency without a valid legal order

## Anonymized Aggregate Data

We **do** reserve the right to collect, aggregate, and anonymize usage data across all customers to identify broad trends in OT threat exposure, vulnerability prevalence, and sector risk patterns. This "sterilized" data:

- Contains **no** organization names, email addresses, or identifying information
- Contains **no** asset-level data tied to specific customers
- Is used only for **aggregate reporting**, research, and service improvement
- May be published as **industry-wide statistics** (e.g., "47% of OTFeed customers monitor DNP3 assets")

You cannot be identified in anonymized aggregate data. If we ever change this, we will update this policy.

## Data Retention

- **Active accounts:** Your data is retained as long as your account is active
- **Cancelled accounts:** Personal data is deleted within 30 days. Anonymized aggregate data derived from your account persists.
- **Server logs:** Retained for 90 days, then automatically purged

## Your Rights

- **Access:** Request a copy of all data we hold about you
- **Correction:** Update your name, email, sector, or asset selections at any time via your account settings
- **Deletion:** Request full account deletion. Data will be removed within 30 days
- **Export:** Download your account data in standard formats (JSON/CSV)

## Security

We treat your organizational information as confidential. Asset inventories are the same class of data as security controls — we protect them accordingly.

- Data stored on secured VPS infrastructure
- Encrypted transit (HTTPS/TLS) for all web and API traffic
- No public exposure of customer data or customer lists
- Access restricted to authorized Cyborama LLC personnel

## Children's Privacy

OTFeed is not intended for individuals under 18. We do not knowingly collect data from minors.

## Changes to This Policy

We will notify customers of material changes via email. Continued use of OTFeed after policy changes constitutes acceptance.

## Contact

For privacy questions, data requests, or complaints:
- **Email:** privacy@otfeed.com
- **Company:** Cyborama LLC, Alabama
- **EIN:** 41-4427011